sendOS GmbH

Sonnenweg 3
DE-14558 Nuthetal
Fon: +49 (0)331 2797877 0

General Manager: Thomas Kramer

HRB: 28593, County Court Potsdam

RESPONSIBLE FOR THE CONTENT IN ACCORDANCE WITH § 6 MDStV:

Thomas Kramer

§ 1 General information

(1) In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour. Furthermore, we inform you about the rights to which you are entitled.

(2) The person responsible pursuant to Art. 4 (7) of the EU General Data Protection Regulation (DS-GVO) is

sendOS GmbH
Sonnenweg 3
DE-14558 Nuthetal

info@send-os.com

(3) The data protection officer of the controller is:

Mr Daniel Rink, lawyer
Rink Rechtsanwaltsgesellschaft mbH
Expo Plaza 1
30539 Hanover
Germany
E-mail: send-os@rink-legal.de

Any data subject may contact the Data Protection Officer directly with any questions relating to data protection.

(4) Types of data processed:

    • Inventory data (e.g., names, addresses).
    • Contact details (e.g., email, phone numbers).
    • Content data (e.g., text input, photographs, videos).
    • Usage data (e.g., websites visited, interest in content, access times).
    • Meta/communication data (e.g., device information, IP addresses).

(5) We collect personal data from the visits of the online offer

(6) If we have not mentioned legal bases in our privacy policy, the following applies: The legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 DSGVO, the legal basis for processing for the performance of our services and implementation of contractual measures as well as answering enquiries is Art. 6(1)(b) DSGVO, the legal basis for processing for the performance of our legal obligations is Art. 6(1)(c) DSGVO, and the legal basis for processing for the protection of our legitimate interests is Art. 6(1)(f) DSGVO. In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) (d) DSGVO serves as the legal basis.

(7) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored. This is done by means of an order processing contract.

(8) Insofar as our service providers or partners are based in a country outside the European Economic Area (EEA), processing shall only take place if it is done for the fulfilment of our contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or allow the processing of data in a third country if the special requirements of Art. 44 ff. DSGVO are met. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to that of the EU (e.g. for the USA through the “Privacy Shield) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses).

(9) Pursuant to Art. 17 and 18 DSGVO, the personal data processed by us will be deleted or restricted in its processing. Unless otherwise specified, personal data are deleted as soon as they are no longer necessary for their intended purpose and there are no other reasons for their storage (e.g. securing evidence). If the data are not deleted because they are required for other and legally permissible purposes, their processing is restricted. I.e. the data is blocked and not processed for other purposes.

§ 2 Your rights

You have the right:

    • revoke your consent at any time in accordance with Art. 7 (3) DSGVO. This has the consequence that we may no longer continue the data processing based on this consent for the future;
    • to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
    • demand the correction of incorrect or incomplete personal data stored by us without delay in accordance with Art. 16 DSGVO;
    • pursuant to Art. 17 DSGVO to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
    • to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;
    • in accordance with Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller; and

complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.

§ 3 Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below.

We will only share your personal information with third parties if:

      • you have given your express consent to this in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO,
      • the disclosure is necessary in accordance with Art. 6 (1) p. 1 lit. f DSGVO for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
      • in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c DSGVO, as well as
      • this is legally permissible and necessary according to Art. 6 para. 1 p. 1 lit. b DSGVO for the processing of contractual relationships with you.

4 Collection of personal data when visiting our website

(1) Collection of general data and information

In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO):

    1. browser types and versions used,
    2. the operating system used by the accessing system,
    3. the website from which an accessing system arrives at our website (so-called referrer),
    4. the sub-websites that are accessed via an accessing system on our website,
    5. the date and time of access to the website,
    6. an internet protocol (IP) address,
    7. the Internet service provider of the accessing system and
    8. other similar data and information that serve to avert danger in the event of attacks on our information technology systems.
  1. The collection of this general data is not used by the controller to draw conclusions about the data subject, but is needed to:
    1. to deliver the contents of our website correctly,
    2. optimise the content of our website and the advertising for it,
      to ensure the long-term functionality of our information technology systems and the technology of our website, and
    3. to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.
  2. This data is stored temporarily – for a maximum of 7 days – in a so-called log file.
    (2) Use of cookies
    In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in relation to the browser you are using and which provide the party setting the cookie (in this case us) with certain information. Cookies cannot execute programmes or transfer viruses to your computer. They are used to make the website as a whole more user-friendly and effective.
    On the one hand, the use of cookies serves to make the use of our offer more pleasant for you. We use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site.
    In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognised that you have already been to our site and which entries and settings you have made so that you do not have to enter them again.
    On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. These cookies enable us to automatically recognise that you have already been to our website when you visit it again. These cookies are automatically deleted after a defined period of time.
    The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests as well as those of third parties in accordance with Art. 6 (1) p. 1 lit. f DSGVO.
    You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the functions of this website.
    5 Functions and offers in detail
    1) Use of a contact form
    If a data subject contacts the data controller by e-mail or via a contact form, the personal data transmitted by the data subject will be stored automatically. Such personal data transmitted on a voluntary basis by a data subject to the controller will be stored for the purposes of processing or contacting the data subject. This personal data is not passed on to third parties. The legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO.
    2) Use of Google Analytics
    For the purpose of demand-oriented design and continuous optimisation of our pages, we use Google Analytics, a web analysis service of Google Inc. (https://www.google.de/ intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google). In this context, pseudonymised usage profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as

    1. browser types and versions used,
    2. the operating system used by the accessing system,
    3. the website from which an accessing system arrives at our website (so-called referrer),
    4. the sub-websites that are accessed via an accessing system on our website,
    5. the date and time of access to the website,
    6. an internet protocol (IP) address,
    7. the Internet service provider of the accessing system and
  3. will be transmitted to and stored by Google on servers in the United States. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services associated with the use of the website and the internet for the purposes of market research and demand-oriented design of these internet pages. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that an allocation is not possible (IP masking).
    The users’ personal data will be deleted or anonymised after 14 months.
    You can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) as well as the processing of this data by Google by downloading and installing a browser add-on (https:// tools.google.com/dlpage/gaoptout?hl=en).
    As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking here to prevent the creation of cookies by Google Analytics. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
    For more information on Google’s use of data, settings and opt-out options, please refer to Google’s privacy policy (https://policies.google.com/technologies/ads) and the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).
    The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO.
    4) Use of Intercom

    1. We transfer your name, email address and IP address to INTERCOM, INC. 98 Battery Street, Suite 402, San Francisco, CA 94111 USA for the purpose of communicating and best supporting our product with you and improving our application.
    2. The data processed may include in particular your IP address, your email address and your name. The data may be processed in the USA.
    3. Detailed information on the privacy policy of INTERCOM,INC can be found at https://docs.intercom.io/pricing-and-terms/privacy.
    4. You can prevent the collection, your use, as well as the processing of this personal data by INTERCOM by sending us an email to info@sendos.com.

5) Use of a newsletter

    1. With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.
    2. We use the so-called double-opt-in procedure to register for our newsletter. This means that after your registration, we will send you an email to the email address you provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses used and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
    3. The only mandatory information for sending the newsletter is your e-mail address. [The provision of further, separately marked data is voluntary and will be used to address you personally]. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a DS-GVO.
    4. You can revoke your consent to receive the newsletter and unsubscribe at any time. You can declare the revocation by clicking on the link provided in every newsletter e-mail or by sending an e-mail to info@send-os.com or by sending a message to the contact details given in the imprint.

6 Objection or revocation against the processing of your data

    1. If you have given your consent to the processing of your data, you may revoke this consent at any time. Such a revocation will affect the permissibility of the processing of your personal data after you have expressed it to us.
    2. Insofar as we base the processing of your personal data on the balance of interests, you can object to the processing. This is the case if the processing is in particular not necessary for the performance of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the merits of the case and either cease or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
    3. Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us of your objection to advertising using the contact details above.

7 Duration for which the personal data are stored

The criterion for the duration of the storage of personal data is the respective statutory retention period. After expiry of the period, the corresponding data is routinely deleted if it is no longer required for the fulfilment or initiation of the contract.

§ 8 Data security

We have implemented appropriate technical and organisational measures to ensure a level of protection appropriate to the risk, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, in accordance with Article 32 of the GDPR.

Among other things, our website and all areas where you can log in are encrypted by an SSL (Secure Socket Layer) connection. As a rule, this is a 256-bit encryption.

This privacy policy is currently valid and has the status May 2018.