Data protection

We are pleased that you visit our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes it is used.

This data protection declaration applies to the internet offering of acQware GmbH, which can be accessed under the domain acqware.io and the various subdomains (“our website”).

Who is responsible and how do I contact you?

Responsible person

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

acQware GmbH
Leutweinstr. 21
81929 Munich
OF
+4989244172890
office@acqware.io

Data protection officer

privac@acqware.io

What is it about?

This data protection declaration meets the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, your age, your address, your telephone number, your date of birth, your email address, your IP address or user behavior when visiting a website. Information for which we cannot (or only with disproportionate effort) establish a connection to you personally, e.g. through anonymization, is not personal data. The processing of personal data (e.g. collection, query, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no lawful reasons for further retention of the data. We will inform you about the specific storage periods and criteria for storage in the individual processing operations. Regardless of this, we store your personal data in individual cases to assert, exercise or defend legal claims and if there are statutory retention obligations.

Who gets my data?

We only pass on your personal data that we process on our website to third parties if this is necessary to fulfill the purposes and in the individual case is covered by the legal basis (e.g. consent or protection of legitimate interests). In addition, in individual cases we pass on personal data to third parties if this serves to assert, exercise or defend legal claims. Possible recipients can then be, for example, law enforcement authorities, lawyers, auditors, courts, etc.

To the extent that we use service providers to operate our website who process personal data on our behalf in accordance with Article 28 of the GDPR, these may be recipients of your personal data. Further information on the use of processors and web services can be found in the overview of the individual processing operations.

Do you use cookies?

Cookies are small text files that we send to the browser of your device and stored there when you visit our website. As an alternative to using cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, however, enable us to carry out various analyses, so that we can, for example, recognize the browser you are using when you visit our website again and transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our Internet offering more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot run programs and do not contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information about the cookies used can be found in the cookie settings or in the Consent Manager of this website.

Domain Name Description Storage period

.www.acqware.io bSession not available 29 minutes

.www.acqware.io hs not available Session

.www.acqware.io ssr-caching not available -17 seconds

.www.acqware.io svSession not available approx. 1 year

.www.acqware.io xsrf-token* s.u. Session

*Reduction of cross-site request forgery attacks

What rights do I have?

Under the conditions of the legal provisions of the General Data Protection Regulation (GDPR), you as a data subject have the following rights:

Information in accordance with Art. 15 GDPR about the data stored about you in the form of meaningful information on the details of the processing and a copy of your data;
Correction in accordance with Art. 16 GDPR of incorrect or incomplete data stored by us;
deletion in accordance with Art. 17 GDPR of the data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
Limitation the processing in accordance with Art. 18 GDPR, if the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you reject its deletion because you need it to assert, exercise or defend legal claims or you object to it have collected the processing in accordance with Article 21 GDPR.
Data portability in accordance with Art. 20 GDPR, insofar as you have provided us with personal data within the scope of your consent in accordance with Art were processed by us using automated procedures. You will receive your data in a structured, common and machine-readable format or we will transmit the data directly to another person responsible, as long as this is technically feasible.
contradiction in accordance with Art. 21 GDPR against the processing of your personal data, provided that this is carried out on the basis of Art. 6 Para. 1 lit. e, f GDPR and there are reasons for this that arise from your particular situation or the objection is directed against direct advertising . The right to object does not exist if overriding, compelling legitimate reasons for the processing can be proven or if the processing is carried out to assert, exercise or defend legal claims. If there is no right to object to individual processing operations, this is stated there.
revocation in accordance with Art. 7 Para. 3 GDPR your consent has been given with effect for the future.
Complaint in accordance with Art. 77 GDPR, contact a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority at your usual place of residence, your place of work or our company headquarters.

How is my data processed in detail?

Below we will inform you about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place.

Provision of the website

Type and extent of processing

When you access and use our website, we collect personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which access is made (referrer URL)
Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

[Our website is not hosted by us, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR.]

Purpose and legal basis

The processing is carried out to protect our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Article 6 (f) GDPR. The collection of data and storage in log files is absolutely necessary for the operation of the website. There is no right to object to processing due to the exception under Article 21 (1) GDPR. To the extent that further storage of log files is required by law, processing is carried out on the basis of Art. 6 Para. 1 lit. c GDPR. There is no legal or contractual obligation to provide the data, although accessing our website is technically not possible without providing the data.

Storage period

The aforementioned data will be stored for the duration that the website is displayed [and for technical reasons for a maximum of [7 days]].

contact form

Type and extent of processing

On our website we offer you the opportunity to contact us using a form provided. The information collected via mandatory fields is required to process the request. In addition, you can voluntarily provide additional information that you believe is necessary to process the contact request.

When you use the contact form, your personal data will not be passed on to third parties.

Purpose and legal basis

The processing of your data by using our contact form is carried out for the purpose of communicating and processing your request based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR. If your request relates to an existing contractual relationship with us, the processing will be carried out for the purpose of fulfilling the contract on the basis of Article 6 Paragraph 1 Letter b GDPR. There is no legal or contractual obligation to provide your data, but processing your request is not possible without providing the information in the mandatory fields. If you do not wish to provide this information, please contact us by other means.

Storage period

If you use the contact form based on your consent, we will store the data collected for each request for a period of three years, starting with the completion of your request or until you revoke your consent.

[If you use the contact form as part of a contractual relationship, we will store the data collected for each inquiry for a period of [three years] from the end of the contractual relationship.]

Newsletter

Type and extent of processing

If you register on our website to receive our newsletter, we collect your email address [and your name...] and store this information together with the date of registration and your IP address. You will then receive an email in which you must confirm your registration for the newsletter (double opt-in). If you do not confirm your registration within [XX hours], it will automatically expire and the data will not be processed for sending the newsletter.

[The newsletter is sent directly by us. Your data will not be passed on to third parties or processors within the meaning of Art. 28 GDPR.]

[To send the newsletter, we use a service from [service providers] who process your personal data on our behalf in accordance with Art. 28 GDPR. Your data will not be passed on to third parties.]

Purpose and legal basis

We process your data for the purpose of sending newsletters based on your consent in accordance with Article 6 (1) (a) GDPR. By unsubscribing from the newsletter, you can declare your revocation at any time with future effect in accordance with Art. 7 Para. 3 GDPR. There is no legal or contractual obligation to provide your data, but sending the newsletter is not possible without providing your data.

Storage period

After registering for the newsletter, we store the data for a maximum of [XX hours] until the registration is confirmed. After successful confirmation, we will store your data until you revoke your consent (unsubscribe from the newsletter) [and for technical reasons beyond that a maximum of [7 days].]

Registration of a user account

Type and extent of processing

To use certain areas of our website, you have the option of registering a user account. The information collected during registration via the mandatory fields is necessary to provide access to the user account. In addition, you can voluntarily provide additional information for additional (convenience) functions.

When registering a user account, your personal data will only be passed on in accordance with this data protection declaration.

Purpose and legal basis

We process your data for the purpose of providing a user account to fulfill a contract with you in accordance with Article 6 Paragraph 1 Letter b GDPR. There is a contractual obligation to provide your data, as this information is necessary to identify you and to fulfill the contract on our part. There is no legal obligation to provide the data. Without providing this information, it is not possible to register a user account and therefore conclude a contract.

In addition, additional voluntarily provided information is processed for the purpose of providing additional (comfort) functions based on your consent in accordance with Article 6 Paragraph 1 Letter a GDPR. By deactivating the functions / deleting the voluntary information in the user account, you can declare your revocation at any time with future effect in accordance with Art. 7 Para. 3 GDPR.

Storage period

We store your personal data as part of the provision of the user account for the duration of the contractual relationship. After the contract has ended / the user account has been deleted, your data will only be stored further if there are legal retention requirements (e.g. tax and commercial law).

Additional information that you provide to us based on your consent will only be stored until you revoke your consent by deactivating the functions / deleting the data, but at the latest until the end of the contract on which the provision of the user account is based.

Registration of a customer account

Type and extent of processing

As part of order processing, we collect your personal data to register a customer account. You can choose whether you would like to order as a guest or register a permanent user account. The information collected via the mandatory fields during registration is identical in both cases and is required to process the order in the online shop. When you register a permanent user account, we also collect a password that you set yourself. In addition, you can voluntarily provide additional information that you believe is necessary to process the order.

Your personal data will only be passed on to third parties (e.g. shipping service providers/forwarding companies) and contract processors in accordance with Art. 28 GDPR to the extent that this is necessary for the processing of the order.

Purpose and legal basis

We process your personal data for the purpose of registering a customer account to fulfill a contract with you in accordance with Article 6 (1) (b) GDPR. There is a contractual obligation to provide your data as far as it relates to the mandatory fields, as this information is necessary to identify you personally and to fulfill the contract on our part. There is no legal obligation to provide the data. Without providing this information, it is not possible to order in our online shop and therefore conclude a contract. There is no obligation to provide additional information provided voluntarily. Ordering in our online shop is also possible without disclosing voluntary information.

The additional processing of your password to register the permanent user account is carried out for the purpose of providing a customer account and to display your previous purchases as well as to store your purchase-related data (e.g. storage of billing address, different delivery addresses) based on your consent in accordance with Article 6 Paragraph 1 lit. a GDPR. By deleting your customer account, you can declare your revocation at any time with future effect in accordance with Art. 7 Para. 3 GDPR.

Storage period

If you order as a guest, your personal data will be stored until your order has been completely processed (end of contract). When registering a permanent customer account, we store the purchase-related data beyond the end of the contract until you revoke your consent (deletion of the customer account). In both cases, your data will only be stored further if there are legal retention requirements (e.g. tax and commercial law).

Sentry

Type and extent of processing

We use Sentry from Functional Software, Inc., 132 Hawthorne St San Francisco, CA 94107, United States as a bug tracker to detect code errors at an early stage and thus ensure the technical functionality of our online offering. Anonymous information is collected about the device on which the error occurred and the time at which the error was detected. In some cases, user sessions can also be recorded to make troubleshooting easier. Functional Software, Inc. does not use this data for advertising purposes.

Purpose and legal basis

The use of Sentry is based on your consent in accordance with Art. 6 Para. 1 lit. a. GDPR and Section 25 Paragraph 1 TTDSG.

Storage period

The exact storage period varies from case to case. Data will be deleted as soon as we have fixed the error and no longer require access to error details. Further information on the storage period on the part of Functional Software, Inc. can be found in the data protection declaration for Sentry: https://sentry.io/privacy/.

Wix

Type and extent of processing

Our website was built using the Wix website builder. Wix is a service of Wix.com, Inc and provides web development technology, web design and layout tools, domain hosting, and other marketing and workflow management applications.

We use Wix, among other things, for web hosting and displaying our website. In addition, Wix collects statistical data about visits to our website.

The following data is usually transmitted: website accessed, date and time of access, amount of data transferred, notification of whether a retrieval was successful, browser type and browser version, operating system of the user, the previously visited website (referrer) and the IP address.

This log data is processed exclusively for the purposes mentioned above, as well as to maintain the security, functionality and optimization of the Wix offering.

Purpose and legal basis

The use of the service is based on our legitimate interests, i.e. interest in secure and efficient provision, as well as the optimization of our online offering in accordance with Art. 6 Para. 1 lit. f. GDPR.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Wix.com, Inc. Further information can be found in the data protection declaration for Wix: https://de.wix.com/about/privacy.

Wix CDN

Type and extent of processing

We use Wix CDN to properly deliver the content on our website. Wix CDN is a service provided by Wix.com, Inc, which acts as a content delivery network (CDN) on our website.

A CDN helps to make the content of our online offering, in particular files such as graphics or scripts, available more quickly using regionally or internationally distributed servers. When you access this content, you connect to Wix.com, Inc. servers, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the purposes stated above and to maintain the security and functionality of Wix CDN.

Purpose and legal basis

The use of the content delivery network is based on our legitimate interests, i.e. interest in secure and efficient provision as well as the optimization of our online offering in accordance with Art. 6 Para. 1 lit. f. GDPR.

Storage period

Wix-Sentry

Type and extent of processing

We use Wix-Sentry from Wix.com, Inc, as a bug tracker to detect code errors at an early stage and thus ensure the technical functionality of our online offering. Anonymous information is collected about the device on which the error occurred and the time at which the error was detected. In some cases, user sessions can also be recorded to make troubleshooting easier. Wix.com, Inc does not use this data for advertising purposes.

Purpose and legal basis

The use of Wix-Sentry is based on your consent in accordance with Article 6 Paragraph 1 Letter a. GDPR and Section 25 Paragraph 1 TTDSG.

Storage period

The exact storage period varies from case to case. Data will be deleted as soon as we have fixed the error and no longer require access to error details. Further information on the storage period on the part of Wix.com, Inc can be found in the data protection declaration for Wix-Sentry: https://sentry.io/privacy/.