Privacy Policy
We operate our websites according to the principles outlined below:
We are committed to complying with the legal provisions on data protection and strive to always consider the principles of data avoidance and data minimization.
1. Name and Address of the Data Controller and Data Protection Officer
a) Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states of the European Union and other data protection regulations is:
Ainovate GmbH
Große Seestraße 44
60486 Frankfurt am Main
Germany
Tel: +(49) 163 42 55 604
Email: info@ainovate.com
Website: www.ainovate.com
2. Definitions
We have designed our privacy policy based on the principles of clarity and transparency. If there are any uncertainties regarding the use of various terms, you can find the corresponding definitions here.
3. Legal Basis for Data Processing
a) Processing of Personal Data under the GDPR
We only process your personal data, such as your name, email address, IP address, etc., if there is a legal basis for doing so. The following regulations of the General Data Protection Regulation (GDPR) may apply:
- Art. 6(1)(a) GDPR: The data subject has given consent to the processing of their personal data for one or more specific purposes.
- Art. 6(1)(b) GDPR: The processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures at the data subject’s request.
- Art. 6(1)(c) GDPR: The processing is necessary for compliance with a legal obligation to which the data controller is subject.
- Art. 6(1)(d) GDPR: The processing is necessary to protect the vital interests of the data subject or another natural person.
- Art. 6(1)(e) GDPR: The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.
- Art. 6(1)(f) GDPR: The processing is necessary for the purposes of legitimate interests pursued by the data controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, in particular where the data subject is a child.
However, we will always indicate the legal basis for processing your personal data in the respective sections of this privacy policy.
b) Consent of the Legal Guardian under Art. 8(1)(2) Alt.2 GDPR
A legal guardian must provide consent for all data processing activities on this website that require the consent of a minor who has not yet reached the age of 16.
You can find information about the individual data processing operations, their purposes, and the categories of data involved, for which the data subject’s consent is required, in the privacy policy.
You can revoke your consent at any time by sending a revocation declaration in written form to the contact details of the data controller. The processing carried out before the revocation remains lawful.
c) Processing of Information under § 25(1) TTDSG
Furthermore, we process information in accordance with § 25(1) TTDSG by storing information on your end device or accessing information already stored on your end device. This may include both personal information and non-personal data, such as cookies, browser fingerprints, advertising IDs, MAC addresses, and IMEI numbers. An end device is any device directly or indirectly connected to the interface of a public telecommunications network for the transmission, processing, or receipt of messages, § 2(2) No. 6 TTDSG.
As a rule, we process this information based on your consent, § 25(1) TTDSG.
If an exception under § 25(2) No. 1 and No. 2 TTDSG applies, we do not require consent. Such an exception exists when we only access or store information to transmit a message over a public telecommunications network or when it is strictly necessary for us to provide a Telemedia service expressly requested by you. You can revoke your consent at any time.
Please note that the revocation of consent does not affect the lawfulness of processing based on consent before its withdrawal.
4. Disclosure of Personal Data
The disclosure of personal data to third parties also constitutes processing within the meaning of the preceding section 3. However, we want to provide you with separate information on the topic of disclosure to third parties. The protection of your personal data is of great importance to us. Therefore, we are particularly cautious when it comes to sharing your data with third parties.
Disclosure to third parties only occurs when there is a legal basis for processing. For example, we may disclose personal data to individuals or companies acting as processors on our behalf in accordance with Article 28 of the GDPR. A processor is anyone who processes personal data on our behalf, especially in a relationship of instruction and control with us.
In accordance with the requirements of the GDPR, we conclude a contract with each of our processors to ensure their compliance with data protection regulations and to provide comprehensive protection for your data.
5. Storage Period and Deletion
Your personal data will be deleted by us when it is no longer necessary for the purposes for which it was collected or otherwise processed, and when processing is not necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest, or for asserting, exercising, or defending legal claims.
6. SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, such as the inquiries you send to us as the website operator, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the change in the address line of your browser from “//” to “//” and by the lock symbol in your browser’s address bar.
When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.
7. Cookies
We use cookies on our website. Cookies are small data packets that your browser automatically creates and stores on your device when you visit our website. These cookies serve to store information related to the device being used.
When using cookies, a distinction is made between technically necessary cookies and “other” cookies. Technically necessary cookies are used when they are absolutely necessary to provide a service of the information society expressly requested by you.
a) Technically Necessary Cookies
To make your use of our services more enjoyable, we use technically necessary cookies, which may include session cookies (e.g., language and font selection, shopping cart, etc.), consent cookies, cookies to ensure server stability and security, and others. The legal basis for these cookies is Article 6(1)(f) of the GDPR, representing our legitimate interest in the error-free operation of the website and our interest in providing you with optimized services.
b) Other Cookies
Other cookies include cookies used for statistical purposes, analysis, marketing, and retargeting.
We use these cookies based on your consent, in accordance with Article 6(1)(a) of the GDPR.
You can revoke your consent for the use of cookies at any time.
Please note that the revocation of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You can either edit your cookie settings on our website, disable the use of cookies in your browser settings (which may also limit the functionality of the online offering), or opt-out on a case-by-case basis for the respective service.
We will inform you in the respective services’ privacy policy on the legal basis for the processing of such data.
Change cookie settings
8. Cookie Banner
To obtain consent for the cookies we use, we utilize the “Cookieyes GDPR Cookie Consent” cookie banner provided by CookieYes Limited, located at 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom. It sets a “Consent-Cookie” to record and process the respective consent status. This Consent-Cookie is technically necessary and is used based on our legitimate interest according to Art. 6(1)(f) of the GDPR and § 25(1) of the TTDSG.
9. Collection and storage of personal data and the nature and purpose of their use
a) External hosting
Our website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. Therefore, all personal data collected on our website is stored on the servers of our hosting provider unless an external service of a third party is integrated. This may include the IP address, email address, communication data, or similar information. The specific personal data involved will be detailed in the following sections describing each function and service. If we use an external service provided by a third party, this will be clearly indicated in the description of the respective service or tool.
The hosting provider processes your data only on our behalf and to the extent necessary to fulfill the services on the website. The hosting provider does not process the data for its own purposes. We have entered into a data processing agreement with the hosting provider.
b) When visiting the website
When you access our website, your browser automatically sends certain information to our website’s server. This information is temporarily stored in a log file. The following information is collected without your intervention and is stored until automated deletion:
• IP address of the requesting computer
• Date and time of access
• Name and URL of the accessed file
• Referrer URL (website from which the access originated)
• Browser type and operating system of your computer
• Name of your internet service provider
We process the aforementioned data for the following purposes:
• Ensuring a smooth connection setup of the website
• Ensuring convenient use of our website
• Evaluating system security and stability
• Error analysis
• Other administrative purposes
Data that could potentially allow us to identify you, such as the IP address, will be deleted within 7 days. If we store the data beyond this period, it will be pseudonymized so that it can no longer be attributed to you.
The legal basis for data processing is Art. 6(1)(f) of the GDPR. Our legitimate interest is based on the purposes listed above for data collection. Under no circumstances do we use the collected data to draw conclusions about your person.
c) Use of Google Maps
Our website uses the Google Maps API. Through the use of Google Maps, information about your use of this website (including your IP address) may be transmitted to and stored by Google on servers in the United States.
Google may transfer the information collected through Maps to third parties, as required by law or when third parties process the data on behalf of Google. However, your IP address will not be associated with other data from Google. Nevertheless, we would like to inform you that it is technically possible for Google to identify individual users based on the received data.
We have no control over whether your personal data and user profiles are processed by Google for other purposes. If you want to prevent this, you can disable the Google Maps service and thus prevent the transfer of data to Google. To do this, you simply need to disable JavaScript in your browser. In this case, no data will be transmitted, but you will also be unable to use the map display on our website.
You can find the Google Privacy Policy here
10. Analysis and Tracking Tools
We use the following analysis and tracking tools on our website. These tools are used to ensure the continuous optimization and personalized design of our website.
We use these tools based on your consent given in accordance with Art. 6(1)(a) of the General Data Protection Regulation (GDPR). You can revoke your consent at any time by changing your cookie settings. The processing that occurred before the revocation remains lawful.
The respective purposes of data processing and data categories can be found in the corresponding tools. Please note that we have no control over whether and to what extent the service providers carry out further data processing.
a) Google Analytics
We use Google Analytics, a web analytics service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
In this context, Google Analytics uses cookies (see section 7). The information generated by the cookie about your use of this website, such as:
- Name and version of the browser used
- The operating system of your computer
- Website from which the access originated (referrer URL)
- IP address of the requesting computer
- Time of the server request
is usually transmitted to a Google server in the United States and stored there.
Your IP address is automatically anonymized by Google before being recorded via EU domains and servers. Therefore, your IP address is not logged or stored.
On our behalf, Google will use this information to evaluate your use of our website, compile reports on website activity, and provide us with other services related to website usage and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
We have concluded a contract for order processing with Google.
Please click here to obtain an overview of privacy at Google: [//support.google.com/analytics/answer/6004245]
b) Google Ads Conversion Tracking
We use Google Ads, an online advertising program provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), on our website. This program includes the use of conversion tracking. When you come to our website via a Google advertisement, Google Ads places a cookie on your device.
The cookie does not enable personal identification. If you visit our website while the cookie is still active, Google and we can recognize that you clicked on the corresponding ad and were redirected to our site. Each Google Ads customer is assigned a different cookie, which cannot be tracked across the websites of Ads customers.
Conversion statistics for Ads customers are created using the data obtained through conversion cookies. As a customer of Google Ads, we learn the total number of users who responded to our ad and were then redirected to a website equipped with a conversion tracking tag. This allows us to determine the success of individual advertising measures. During this process, we do not receive any information that could personally identify you as a user.
When using Google Ads, your browser automatically establishes a direct connection to Google’s server. If you have a Google account and are logged in, your visit can be assigned to your account. If you do not have a Google account, Google will assign you a unique identifier. We have no control over the data that Google collects and stores.
For more information on Google’s privacy policy, please visit //www.google.de/policies/privacy/.
c) Use of Google reCAPTCHA
We use the reCAPTCHA service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our web pages in our contact form to distinguish input from humans from automated, abusive, and machine processing. We have a legitimate interest in protecting our web offers against abusive automated spying and spam.
When queried by the reCAPTCHA service, both your IP address and, if
necessary, further data required for the reCAPTCHA service are transmitted to and processed by Google.
To use reCAPTCHA, you must accept Google’s terms of use. There is a separate field for this. We have enabled IP anonymization on this website, so your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there.
On our behalf, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA will not be merged with other data from Google. The data is subject to Google’s separate privacy policy.
For more information about Google’s privacy policies, please visit: //www.google.com/intl/de/policies/privacy/.
By integrating reCAPTCHA, Google Fonts are also dynamically loaded by Google without active determination by the website operator or visitor. The integration of these web fonts is done through a server call, typically to a server in the USA operated by Google. This may transmit and store the following information at the server:
- Name and version of the browser used
- Website from which the request originated (referrer URL)
- The operating system of your computer
- The screen resolution of your computer
- IP address of the requesting computer
- Language settings of the browser or operating system used by the user
For more information, please refer to Google’s privacy policy, which can be found here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/
11. Rights of the Data Subject
You have the following rights:
a) Information
According to Article 15 of the General Data Protection Regulation (GDPR), you have the right to obtain information about the processing of your personal data by us. This right to information includes details about:
- The purposes of the processing
- The categories of personal data being processed
- The recipients or categories of recipients to whom the data has been or will be disclosed
- The planned duration of storage or, if not possible, the criteria used to determine that duration
- The existence of the right to rectification, erasure, restriction of processing, or objection
- The right to lodge a complaint with a supervisory authority he source of your personal data, if not collected from you directly
- The existence of automated decision-making, including profiling, and meaningful information about the logic involved
b) Rectification
According to Article 16 of the GDPR, you have the right to have your inaccurate or incomplete personal data stored by us promptly corrected.
c) Erasure
You have the right, according to Article 17 of the GDPR, to request the immediate erasure of your personal data stored by us, unless further processing is necessary for one of the following reasons:
- The personal data is still necessary for the purposes for which it was collected or otherwise processed
- The exercise of the right to freedom of expression and information
- Compliance with a legal obligation that requires processing under the EU or Member State law to which the controller is subject, or the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
- Reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) of the GDPR
- Archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Article 89(1) of the GDPR, to the extent that the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing
- The establishment, exercise, or defense of legal claims
d)
Restriction of Processing
According to Article 18 of the GDPR, you can request the restriction of the processing of your personal data for one of the following reasons:
- You contest the accuracy of your personal data.
- The processing is unlawful, and you oppose the erasure of the personal data.
- We no longer need the personal data for the purposes of processing, but you require it for the establishment, exercise, or defense of legal claims.
- You have objected to the processing pursuant to Article 21(1) of the GDPR.
- e) Notification
If you have requested the rectification or erasure of your personal data or the restriction of processing pursuant to Articles 16, 17, or 18 of the GDPR, we will communicate this to all recipients to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to request information about these recipients from us.
- f) Data Portability
You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to request the transmission of this data to another controller, where technically feasible and where the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b) of the GDPR.
- g) Withdrawal
According to Article 7(3) of the GDPR, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the law fulness of processing based on consent before its withdrawal. In the future, we may no longer continue the data processing based on your revoked consent.
- h) Complaint According to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.
- i) Objection
If your personal data is processed based on legitimate interests pursuant to Article 6(1)(f) of the GDPR, you have the right to object to the processing of your personal data under Article 21 of the GDPR, provided that there are grounds relating to your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without requiring the specification of a particular situation. To exercise your right of withdrawal or objection, simply send an email to datenschutz@ainovate.com.
j) Automated Individual Decision-Making, Including Profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. However, this does not apply if the decision is:
- Necessary for entering into or performing a contract between you and us
- Authorized by Union or Member State law to which we are subject and that also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or
- Based on your explicit consent
However, these decisions must not be based on special categories of personal data referred to in Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies, and appropriate measures to safeguard your rights and freedoms and legitimate interests have been taken.
Regarding the cases mentioned in i) and iii), we take appropriate measures to safeguard your rights and freedoms and legitimate interests, which include at least the right to obtain human intervention on our part, to express your point of view, and to contest the decision.
12. Amendment of the Privacy Policy
If we amend the privacy policy, it will be made clear on the website.
Date: 12.05.23