Information on the Collection of Personal Data
IIn the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g., name, address, email addresses, user behavior.
The controller according to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is
AI-XPERIENCE GmbH
Reuthweg 5
91183 Abenberg
Germany
E-Mail: info (at) ai-xperience.io
Management and Data Protection Officer: André Sept, address as above
Registration Court: Amtsgericht Nürnberg
Registration Number: HRB 43191
When you contact us by email or through a contact form, the data you provide (your email address, possibly your name and telephone number) will be stored by us to answer your questions. We delete the data arising in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations.
If we rely on commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the specified criteria for the storage duration.
Purpose of Data Processing
Data storage when using the website is for the purpose of optimizing the website, sending information and newsletters, and fulfilling individual requests when contacted via email or a contact form.
Data Transfer
The data is only passed on to third parties, especially service providers, for the processing of the above-mentioned purposes.
Regular Deadlines for Data Deletion
Nach Ablauf der jeweiligen gesetzlichen Aufbewahrungsfristen werden die entsprechenden Daten gelöscht, soweit sie nicht mehr für die Erfüllung der vertraglichen oder sonstigen Pflichten benötigt werden. Daten, die hiervon nicht berührt sind, werden gelöscht, sobald der Bestimmungszweck entfällt.
Planned Data Transfer to Third Countries
A data transfer to third countries is not planned.
General Description of Data Processing Security
All persons and employees who are involved in the processing and use of the data have signed a written commitment to comply with data secrecy. All data is protected in accordance with the prescribed technical and organizational measures, which are regularly reviewed. Regular backup files are created.
Your Rights
You have the following rights with respect to us regarding the personal data concerning you:
– Right to information,
– Right to rectification or erasure,
– Right to restriction of processing,
– Right to object to the processing,
– Right to data portability.
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
If the personal data is necessary for the customer relationship with AI-XPERIENCE GmbH, the rights to erasure, restriction, and objection only exist to the extent that they do not legally make the implementation of the customer relationship impossible.
Collection of Personal Data When Visiting Our Website
When using the website for information purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data that is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 (1) sentence 1 lit. f GDPR):
– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status/HTTP status code
– Amount of data transferred in each case
– Website from which the request comes
– Browser
– Operating system and its interface
– Language and version of the browser software.
In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the place that sets the cookie (here by us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.
Use of Cookies
This website uses the following types of cookies, the scope and functionality of which are explained below:
Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
You can configure your browser setting according to your wishes and, for example, refuse the acceptance of third-party cookies or all cookies. We point out that you may not be able to use all functions of this website.
Further Functions and Offers of Our Website
In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do this, you generally need to provide further personal data that we use to provide the respective service and for which the aforementioned principles on data processing apply.
In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
Furthermore, we may pass on your personal data to third parties when event participations, contract conclusions or similar services are offered by us together with partners. You will receive more information on this when providing your personal data or below in the description of the offer.
Insofar as our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.
Objection or Revocation Against the Processing of Your Data
If you have given consent to the processing of your data, you can revoke this at any time. Such a revocation influences the permissibility of processing your personal data after you have given it to us.
Insofar as we base the processing of your personal data on the balancing of interests, you may object to the processing. This is the case if the processing is not necessary in particular for the fulfillment of a contract with you, which is described by us in each case in the following description of the functions. In the event of such an objection, we ask you to explain the reasons why we should not process your personal data as carried out by us. In the case of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling legitimate grounds on which we will continue the processing.
Use of Blog and Comment Functions
In our blog, where we publish various posts on topics related to our activities, and in other places, you can make public comments. Your comment will be published with your specified username for the post. We recommend using a pseudonym instead of your real name. The specification of username and email address is required, all other information is voluntary. If you leave a comment, we also store your IP address, which we delete after two weeks. The storage is necessary for us to be able to defend ourselves against liability claims in cases of possible publication of illegal content. We need your email address to contact you if a third party should object to your comment as unlawful. The legal bases are Art. 6 (1) sentence 1 lit. b and f GDPR. The comments are not checked before publication. We reserve the right to delete comments if they are objected to as unlawful by third parties.
Use of Social Media Plug-ins
(1) We currently use the following social media plug-ins: Facebook, Google+, Twitter, Xing, LinkedIn. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the marking on the box above its initial letter or logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online offer. In addition, the data mentioned in § 3 of this declaration will be transmitted. In the case of Facebook and Xing, according to the respective providers in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, personal data is transmitted from you to the respective plug-in provider and stored there (for US providers in the USA). Since the plug-in provider carries out the data collection in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the grayed-out box.
(2) We have no influence on the collected data and data processing operations, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.
(3) The plug-in provider stores the data collected about you as usage profiles and uses these for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation takes place in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins we offer you the possibility to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 (1) sentence 1 lit. f GDPR.
(4) The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be directly assigned to your existing account with the plug-in provider. If you press the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as you can then avoid being assigned to your profile with the plug-in provider.
(5) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the privacy policies of these providers, which are communicated below. There you will also receive further information about your rights in this regard and setting options to protect your privacy.
(6) Addresses of the respective plug-in providers and URL with their privacy notices:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
c) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
d) Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy.
e) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Integration of YouTube Videos
(1) We have integrated YouTube videos into our online offer, which are stored on http://www.YouTube.com and can be played directly from our website. [These are all embedded in “extended privacy mode”, i.e., no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transmission.]
(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in § 3 of this declaration will be transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses