At Roxtra GmbH, we take protecting your personal data very seriously and strictly adhere to the regulations of German data protection legislation. We only collect personal data to the extent technically required. Under no circumstances will the data collected be sold. We always process all personal data in line with the General Data Protection Regulation.
The following declaration will provide you with an overview of how we ensure the protection of your data and what type of data is collected, used and processed for what purpose and to what extent.
We also inform data subjects of their rights.
Definition of terms
Personal data refers to all information relating to an identified or identifiable natural person. A person is identifiable if they can be identified directly or indirectly by a specific characteristic such as an identification number, location data or an online ID.
Processing is defined as all operations concerning personal data, with or without the assistance of an automated procedure. The processing of data can, in particular, include the collection, organization, storage, arrangement, adaptation or alteration, dissemination or making available in some other way.
Profiling refers to any type of automated processing of personal data intended to evaluate personal aspects of this data. In particular, it concerns analyzing or predicting aspects relating to performance at work, economic situation, health, personal preferences, interests, place of residence or change of location of these natural persons.
Pseudonymization means the processing of personal data such that it can no longer be used to identify to a specific person. This is done, for example, by storing additional information necessary for identification separately and by implementing technical and organizational measures.
A processor is any natural or legal person, public authority, agency or other body which processes data on behalf of the controller.
A recipient is any natural or legal person, public authority, agency or other body to which personal data is disclosed, whether a third party or not.
A third party is defined as any person other than the persons named above who is entitled to process personal data
Consent is deemed to be any action with which a person indicates that they agree to the processing of their personal data. This expression of consent can be provided in the form of a declaration or any other action which confirms consent.
Collection, processing and passing on of personal data
Generally speaking, you can visit our website without leaving behind any personal data. Personal data will only be collected when specific services are used and if you have provided us with this information, e.g.:
- If you create support requests via our ticket system.
- If you place orders via our online store.
- If you register for our newsletter.
- If you register in our forum.
- If you leave comments in our blog.
Consent and purpose limitation
Where the processing of personal data is required and there is no legal basis for this, the consent of the data subject will usually be obtained. Where personal or commercial data is entered (e-mail addresses, names, postal addresses), the disclosure of your data takes place on an expressly voluntary basis. By entering your data, you consent to this data being collected, processed and/or used for the purposes of establishing contact, contract performance, advertising or for safeguarding our legitimate interests with regards to providing our customers and potential customers with advice and support. We will not collect, process or use this data for any other purpose. You can revoke this consent with effect for the future at any time.
We will not pass on this data to third parties unless this is expressly requested by you.
Anonymous data collection on our website
Roxtra GmbH collects and stores information automatically in its server log files, which your browser sends to us. This includes, for example:
- Browser type and version
- Operating system used
- Referrer URL (the site visited beforehand)
- Host name of the computer accessing the site (IP address)
- Time of the server request
- Similar data which is used to avert danger in the event of an attack on our website or IT structure
This data will not be used to identify specific persons. This data will not be merged with other sources of data and will also be deleted after a statistical analysis. Rather, the recording of data is intended to ensure that our website works correctly, to guarantee the permanent availability of our IT systems and ensure that we can assist law enforcement agencies in the event of a cyber attack.
The aim of cookies is to recognize users of our website. The purpose of recognizing them is to make it easier for visitors to use our website. For example, a cookie remembers the content of the shopping cart that you have filled in our online shop.
Registering on our website/in our forum
You have the option of registering on our website so that you can benefit from offers which, by their very nature, can only be made available to registered users. We collect personal data in order to do this. This is taken from the relevant input screen.
Your data will only be collected and stored for internal use. In certain cases, for example if you place an order in our online shop, your data will be passed on to a processor such as a parcel service provider. The latter will likewise only use the forwarded data for internal processing.
Furthermore, during registration, we save the IP address assigned by your Internet provider along with the date and time of registration. This data is saved in order to prevent the misuse of our services. Here too, the data will only be passed on if there is a legal obligation to do so or if this is required in order to assist in law enforcement.
We are happy to provide you with information about the data we hold about you at any time. Furthermore, your stored data will be deleted at your request, provided this does not contravene any statutory retention periods.
There is an option on our website to subscribe to the Roxtra GmbH newsletter. We use this to regularly inform our potential customers about new features relating to the software products offered and to provide them with interesting blog posts.
The data collected during the registration process is taken from the relevant registration form and will only be used for internal processing. It will not be forwarded to third parties. For legal reasons, upon registration, you will be sent a confirmation e-mail based on the double opt-in process. In it, you confirm that it was indeed you who subscribed to the newsletter.
In addition to the data which you can see when you subscribe to the newsletter, we save your IP address along with the date and time of the registration. This data is collected in order to trace any potential misuse of e-mail addresses at a later time.
You can unsubscribe from our newsletter at any time, either by clicking on the link in the newsletter or by expressing your will to Roxtra GmbH in some other way.
Our newsletters contain tracking pixels. A tracking pixel is a miniature graphic embedded in an e-mail in HTML format. These tracking pixels enable a log file to be created which provides information on which links contained in the e-mail have been opened by the recipient. This information is used by us to optimize the content of our newsletter. The personal data collected here will not be passed on to any third parties. The data collected will be deleted if you unsubscribe from the newsletter.
Options for getting in touch via our website
You can get in touch with us quickly and directly via our website. This also requires personal data to be entered – at least a first name, last name and e-mail address. This data will only be stored internally and used within the communication with the requestor.
Comments function in the blog
Our website also includes a blog. The blog is a public portal in which Roxtra GmbH and external authors record articles or fundamental ideas in blog posts. You can make comments on these posts.
If a comment is left, alongside the comment text, the relevant name of the person commenting is also saved and published. The date and time that the comment is made is also saved and published.
For security reasons, and to protect the rights of third parties, the IP address of the person commenting is saved when the comment is posted. Data is not passed on to third parties unless this is specified by law or where this is necessary to assist in law enforcement.
Our website uses Google Analytics (with anonymization function). Google Analytics is a web analysis service used to record, collect and analyze data on the behavior of website visitors. The information collected includes the amount of time a person spent visiting our website, which sub-pages were clicked and which sites the visitors came from. These evaluations will predominantly be used to optimize our website and to create a cost/benefit analysis of Internet advertising.
Personal data is transmitted to us via the cookie. This data includes the location from which our website was accessed, for example. Every time you visit our website, this personal data, including your IP address, is sent to Google in the United States of America. This personal data is stored by Google in the United States of America. Under some circumstances, Google will pass the personal data collected using the technical process on to third parties. We would like to point out that Google is certified in accordance with the Privacy Shield Framework and thus guarantees a data protection standard which is just as high as that provided by EU regulations.
You can prevent cookies being stored by configuring your browser software accordingly, but please note that, if you do so, you may not be able to use all of our website’s functions in full. In addition, you can prevent Google from recording the data generated by the cookie and linked to your use of the website and you can also prevent the processing of this data by Google by downloading and installing the browser plug-in available via the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
Google Analytics components are provided by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
You can find further information on data protection at Google here:
You can disable Google Analytics for display advertising and adapt Google advertisements in the Display Network by calling up the display settings here: https://www.google.com/settings/ads
Google remarketing services are provided by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
We use Google Adwords on our website. This is a service which enables advertising within a Google search. Here, the advertisements displayed are shown if a user types in specific keywords in the Google search.
These advertisements are designed to display topic-related advertising and thus also to promote our website. In addition, Google AdWords can also be used to place advertisements on third-party websites.
Google Adwords uses conversion cookies to provide an analysis of whether a visitor accesses our website via one of these advertisements. These cookies are not used to identify visitors and expire after 30 days. Google uses these to generate statistics which reveal the success or failure of an advertisement.
Every time you visit our website, this personal data, including your IP address, is sent to Google in the United States of America. This personal data is stored by Google in the United States of America. Under some circumstances, Google will pass the personal data collected using the technical process on to third parties. We would like to point out that Google is certified in accordance with the Privacy Shield Framework and thus guarantees a data protection standard which is just as high as that provided by EU regulations.
You can prevent cookies from being stored via the settings in your browser. You can find detailed information on how to do this in the “Cookies” section.
We use Microsoft Advertising on our website. For the purpose of measuring marketing success, a so-called conversion cookie is placed on your computer when you click on one of our ads. This cookie records how many people have clicked on one of our Microsoft Advertising ads. We can only evaluate the total number of people, we cannot identify individuals.
The conversion cookie set on your computer has only a limited validity. The following information is recorded by this cookie: Your IP address, information about your browser and device, identifiers assigned by Microsoft, the previous website from which you accessed our website (referrer URL), the address (URL) of our website.
Your information is transferred to Microsoft in the USA. Microsoft is certified according to the “Privacy Shield” agreement, whereby the company is committed to adhere to a data protection standard in accordance with European guidelines.
Responsible for the processing is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Our website uses Twitter components – a blogging service via which the user can publish microblogs (or short messages).
The Twitter components are used to ensure that our website visitors can always read the latest tweets from Roxtra GmbH.
By calling up a website on which a Twitter component is used, your browser is prompted to download specific content from Twitter. If the visitor to our website is logged into Twitter, Twitter identifies which subpages of the website have been visited for the duration of the website visit. This data is automatically transferred by the component to Twitter.
Twitter is operated by Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
Our website uses Xing components. Xing is a social network which is mainly used in the professional environment.
If you call up a website on which a Xing plug-in is used, certain Xing components are downloaded by the visitor’s browser. You can find information on the downloaded components here: https://dev.xing.com/plugins
If the visitor to our website is logged into Xing during the visit, Xing is informed of which specific subpages of our website were visited.
Xing is operated by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.
Our website uses components of the video platform YouTube. YouTube is a website on which you can watch and comment on videos free of charge.
If you call up a website featuring a YouTube video, certain YouTube components are downloaded by the visitor’s browser. You can find information about YouTube here: https://www.youtube.com/yt/about
This technical process informs YouTube and Google which subpages of our website were visited. If the visitor to our website is logged into YouTube during the visit, YouTube is informed of which specific subpages of our website were visited.
If the visitor to our website is logged into YouTube during the visit, YouTube is informed of which specific subpages of our website were visited. This information is then assigned to the corresponding YouTube account.
YouTube is provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. This is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Our website uses components of the social medial platform Facebook. Facebook is a social network. A social network is an online community that allows users to communicate with one another. It also often provides additional opportunities for interaction in the virtual world. These platforms can also be used by companies to provide company-related information.
In particular, Facebook enables users to create a profile, upload images and to network in the form of friend requests.
Facebook is operated by Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland is responsible for the processing of personal data for persons living outside the USA and Canada.
By accessing one of our web pages that uses a Facebook component (Facebook plugin), your web browser will automatically download a representation of the Facebook component. This tells Facebook which subpages of our website have been visited. You can find a comprehensive overview of this Facebook plugin here: https://developers.facebook.com/docs/plugins/
On pages on which a Facebook component is integrated, Facebook is informed whether you were logged in at the time you visited the website. This happens independently of clicking on the Facebook component.
If you do not wish such information to be provided, you can log out of Facebook before visiting our website.
You can find more information in the Facebook Data Policy at https://facebook.com/about/privacy/
Rights of the data subject
You have the right to confirm whether your personal data is to be processed, at any time. You also have the right to request information about the data we hold that relates to you, the origin and recipient thereof, and the purpose for which it is being stored, at any time. You can obtain information about the stored data from the data protection officer at email@example.com. We are happy to make available to you your personal data which is being held by us in a structured, commonly used machine-readable format.
You can also obtain information about the purpose of the data processing and the categories of personal data which are being processed. Upon request, you will also be provided with information about the recipients or categories of recipients to whom your personal data has been or is to be disclosed, in particular in the case of recipients in third countries or at international organizations.
If the personal data is not collected from the data subject, we will provide you with all the available information on the origin of the data. Where possible, we will also provide you with the planned period of time for which this personal data will be stored or, if this is not possible, the criteria applied to determine how long it will be stored.
Furthermore, we would like to point out your right of appeal with a supervisory authority and your right to automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and, in such cases, to conclusive information regarding the logic involved as well as the consequences and the anticipated impact of such processing for the data subject.
In addition, you have the right, in accordance with legal provisions, to have this personal data corrected, blocked or deleted (right to be forgotten). You can also object to the processing of your data.
In the case of an erasure request, we will comply with this immediately provided one of the following reasons applies:
- Processing the personal data is no longer necessary
- The data subject whose data is being processed revokes their consent on which the processing in accordance with Art. 6 (1 a) GDPR or Art. 9 (2 a) GDPR is based and there is no other legal basis for this
- The data subject objects to the processing in accordance with Art. 21 (1) GDPR and there are no priority legitimate reasons for the processing, or the data subject objects to the processing in accordance with Art. 21 (2) GDPR.
- The personal data was unlawfully processed.
- The deletion of personal data is required in order to meet a legal obligation under European Union law or the laws of Member States with which the controller must comply.
- The personal data was collected in relation to information society services offered in accordance with Art. 8 (1) GDPR.
Where personal data is processed for the purpose of direct advertising, you can object to processing for advertising purposes at any time. Your data will then no longer be processed for the purpose of direct advertising.
Applications and application procedures
We collect and process personal data as part of application procedures in order to ensure that this process goes smoothly. This processing may take place electronically, particularly if the application documents are transmitted electronically. Provided an employment contract is concluded with the applicant, the data transmitted will be stored in line with statutory provisions. If no employment contract is concluded with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision. The data will not be deleted if this contravenes other legitimate interests (e.g. a procedure in accordance with the German General Act on Equal Treatment).
The storage of personal data is subject to statutory retention periods. At the end of this period, data will be routinely deleted, provided it is no longer required for contract fulfillment or contract initiation.
Roxtra GmbH implements technical and organizational security measures to safeguard the data you make available to Roxtra GmbH against accidental or malicious manipulation, loss, destruction or access by unauthorized persons and to ensure that the protection of our website is as complete as possible. However, we would still point out that complete protection can never be guaranteed with regards to Internet-based data transmissions. You are therefore welcome to provide us with personal data in some other way (e.g. by fax or phone). Our security measures are continually being improved in line with technological advances.
Phone.: +49 (0) 7161 505 70-0
Fax: +49 (0) 7161 50570 29
Last update: July 2020