We, Roxtra GmbH, take the protection of your personal data very seriously and adhere strictly to the rules of the German data protection laws. Personal data is only collected by us to the extent technically necessary. In no case will the collected data be sold. We always process all personal data in accordance with the Basic Data Protection Regulation.
The following statement provides an overview of how we ensure the protection of your data and what type of data is collected, used and processed for what purpose and to what extent. Furthermore, we inform data subjects about the rights to which they are entitled.
Personal data is any information relating to an identified or identifiable natural person. An individual is identifiable if he or she can be identified directly or indirectly by a specific characteristic such as an identification number, location data or an online identifier.
Processing refers to all operations in connection with personal data. Processing may be carried out with or without the aid of automated procedures. In particular, processing may include collection, recording, organisation, storage, arrangement, adaptation or alteration, dissemination or any other form of making available.
Profiling means any automated processing of personal data which involves the evaluation of personal aspects relating to that data. In particular, it is intended to analyse or predict aspects relating to the performance at work, economic situation, health, personal preferences, interests, location or change of location of that natural person.
Pseudonymization is used to process personal data in such a way that it can no longer be assigned to a specific person. This is done, for example, by separately storing additional information necessary for identification and by applying technical and organizational measures.
A processor is any natural or legal person, public authority or other body that processes data on behalf of the controller.
The recipient is defined as any natural or legal person, authority or other body to whom personal data is sent. This does not have to be a third party.
A third party is anyone other than the persons already mentioned above who is authorised to process personal data.
Consent is any act by which an individual indicates that he or she consents to the processing of his or her personal data. The expression of consent may take the form of a statement or other act confirming that consent has been given.
Collection, processing and disclosure of personal data
In principle, you can visit our website without leaving any personal data. Personal data is only collected when using certain services if you provide it to us of your own accord, e.g.:
- When you create support requests through our ticket system.
- When ordering via our webshop.
- When signing up for the newsletter.
- When you register in our forum
- When you leave comments on our blog
Consent and purpose limitation
If the processing of personal data is necessary and there is no legal basis for this, the consent of the persons concerned is generally obtained. When entering personal or business data (e-mail addresses, names, addresses), the disclosure of your data is expressly voluntary. By entering your data, you agree that the data entered may be collected, processed or used for the purpose of contacting you, processing contracts, for advertising or for safeguarding our own justified business interests with regard to advising and supporting our customers and interested parties. The data will not be collected, processed or used for any other purpose. This consent can be revoked at any time with effect for the future. A passing on of these data does not take place, unless it is expressly desired by you.
Anonymous data collection on our website
Roxtra GmbH automatically collects and stores in its server log files information that your browser sends to us. These are for example:
- Browser type/version
- Operating system used
- Referrer URL (the previously visited page)
- Host name of the accessing computer (IP address)
- Time of the server request.
- Similar data that serve to avert danger in the event of an attack on our website or IT structure
This data is not assigned to specific persons. A combination of this data with other data sources is not made, the data is also deleted after a statistical analysis. Rather, the collection of this data ensures the correct functioning of our website, permanent accessibility of our IT systems and guarantees the support of law enforcement authorities in the event of a cyber attack.
Our Internet pages use so-called "cookies" in several places, which serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most websites use such cookies. Many of them contain a cookie ID. This cookie ID consists of a predefined string of characters and helps the websites to distinguish and recognise the browsers used by the visitors. Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Cookies do not cause any damage to your computer and do not contain viruses.
The purpose of cookies is to enable users of our website to be recognised. The purpose of this recognition is to make it easier for users to use our website. For example, a cookie remembers the contents of the shopping cart that you have filled in our online shop.
Registration on our website/ in our forum
You have the option of registering on our website in order to be able to use offers which, by their nature, can only be made available to registered users. Personal data is collected for this purpose. These result from the corresponding input mask.
Your data will be collected and stored exclusively for internal use. In certain cases, such as the order in our online shop, the forwarding of your data to order processors, such as a parcel service provider. This uses the forwarded data also only for internal processing.
Furthermore, we store the IP address assigned by your Internet provider and the date and time of registration. This data is stored in order to prevent misuse of our services. Here, too, the data is only passed on if there is a legal obligation to pass it on or if the passing on of the data serves to assist in criminal prosecution.
We will gladly provide you with information about your stored personal data at any time. Furthermore, your stored data will be deleted upon request, provided that this does not conflict with any legal retention periods.
On our website, we provide you with the opportunity to subscribe to the Roxtra GmbH newsletter. Thereby we inform our interested parties regularly about innovations of the offered software products or about interesting blog articles.
The data collected in this process results from the corresponding registration form and is only used for internal processing. Data will not be forwarded to third parties. For legal reasons, a confirmation email is sent on the basis of the double opt-in procedure. In doing so, you confirm that the newsletter registration was actually carried out by you.
In addition to the apparent data, we store your IP address and the date and time of registration. This data is collected in order to be able to trace a possible misuse of e-mail addresses at later times.
You have the option to unsubscribe from our newsletter at any time. This can be done either by clicking on a link in the newsletter or by sending Roxtra GmbH a corresponding declaration of intent in an alternative way.
Our newsletters contain so-called tracking pixels. This is a miniature graphic that is embedded in emails in html format. Such tracking pixels allow the creation of a log file that provides information about which links in the email were opened by the recipients. We use this information to optimise the content of our newsletters. The personal data collected in the process will not be passed on to third parties. If you unsubscribe from our newsletter, the collected data will be deleted.
Contact option via our website
You have the possibility to contact us quickly and directly via our website. Here, too, it is necessary to provide personal data, at least your first name, surname and e-mail address. This data is only stored internally and used in the context of communication with the enquirer.
Comment function in the blog
The offer of our website also includes a blog. The blog is a publicly visible portal in which Roxtra GmbH or external authors write down articles or basic thoughts in blog posts. These contributions can be commented.
If such a comment is left, the name of the commenter will be saved and published in addition to the comment text. Furthermore, the date and time of the comment is stored and also published.
For security reasons and to protect the rights of third parties, the IP address of the commenter is stored when comments are submitted. The data will not be passed on to third parties unless this is required by law or serves to support law enforcement.
Google Analytics (with anonymization function) is used on our website. Google Analytics is a web analysis service that collects and analyzes data about the behavior of website visitors. For example, it is recorded how long a person has visited our website, which sub-pages have been clicked on and from which page the visitor came. These evaluations are mainly used to optimize our website and for cost-benefit analysis of Internet advertising.
Personal data is transmitted to us by means of the cookie. This includes, among other things, the location from which our website was accessed. Each time you visit our website, this personal data, including your IP address, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties. We would like to point out that Google is certified under the Privacy Shield agreement and thus guarantees a similarly high standard of data protection to that provided for under EU regulations.
The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Further information on Google's data protection can be found here: https://www.google.de/intl/de/policies/privacy.
Our website uses remarketing with Google Analytics for online advertising, which displays ads on websites through third-party providers and Google. Cookies are used for this purpose by this website and third party vendors including Google. First-party cookies are combined with third-party cookies to target and optimize website ads based on previous visits.
You can disable Google Analytics for display advertising and customize ads Google on the Display Network by going to the Ads Settings: https://www.google.de/settings/ads.
The operating company of the Google Remarketing services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Google Adwords is used on our website. This is a service that allows advertising within the Google search. The ads are displayed when a user uses certain keywords in the Google search.
The purpose of these ads is the insertion of thematically relevant advertising and thus also the promotion of our website. Furthermore, Google AdWords also displays advertisements on third-party websites.
In order to be able to create an evaluation of whether a visitor has reached our website via such an advertisement, Google Adwords sets so-called conversion cookies. These cookies do not serve to identify the visitor and lose their validity after 30 days. Google generates statistics that show the success or failure of an advertisement.
Whenever you visit our website, personal data, including your IP address, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties. We would like to point out that Google is certified under the Privacy Shield agreement and thus guarantees a similarly high standard of data protection as provided for under EU regulations.
We use Microsoft Advertising on our website. For the purpose of marketing performance measurement, a so-called conversion cookie is set on your computer when you click on one of our ads. This cookie is used to record how many people have clicked on one of our Microsoft Advertising ads. For us, only the total number of people can be evaluated, an identification of individuals can not be made.
The conversion cookie set on your computer has a limited validity. The following information is collected by this cookie: Your IP address, information about your browser and device, identifiers assigned by Microsoft, the previous website from which you accessed our website (referrer URL), the address (URL) of our website.
Your data will be transferred to Microsoft in the USA. Microsoft is certified according to the "Privacy Shield" agreement, whereby the company undertakes to comply with a data protection standard according to European guidelines.
The data controller is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Our website uses components of Twitter, a blogging service via which users can distribute short blog entries or short messages. The Twitter component is used so that our website visitors can always read the latest short messages from Roxtra GmbH.
By calling up a website on which a Twitter component is used, your browser is caused to download certain content from Twitter. If the visitor to our website is logged into Twitter, Twitter recognizes which subpages of the website were visited for the duration of the website visit. This data is automatically transmitted to Twitter by the component.
Responsible for Twitter is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
Components of Xing are used on our website. Xing is a social network which is mainly used in the professional environment.
By calling up a website on which a Xing plug-in is used, certain components of Xing are downloaded by the visitor's browser. Information on the downloaded components can be found here: https://dev.xing.com/plugins
If the visitor to our website is logged in to Xing during the visit, Xing learns the specific subpages that were visited on our website.
Xing is operated by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.
On our website, components of the video platform Youtube are used. On Youtube, videos are made available for free viewing and commenting.
By calling up a website on which a Youtube video is used, certain Youtube components are downloaded by the visitor's browser. You can find information about Youtube here: https://www.youtube.com/yt/about/de
Through this technical process, Youtube and Google learn which subpages of our website were visited. If the visitor to our website is logged into Youtube during the visit, Youtube learns the specific subpages that were visited on our website.
If the visitor to our website is logged into Youtube during the visit, Youtube learns the specific subpages that were visited on our website. This information is assigned to the corresponding Youtube account.
The operator of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. This is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Components of the social media platform Facebook are used on our website. Facebook is a social network.
A social network is an online community that allows users to communicate with each other. In addition, further interaction options are often made available in virtual space. These platforms can also be used by companies to provide company-related information. In particular, Facebook allows users to create a profile, upload pictures and network in the form of friend requests.
Facebook is operated by Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland is responsible for the processing of personal data for persons living outside the USA or Canada.
By calling up one of our Internet pages that use a Facebook component (Facebook plug-in), your Internet browser will automatically download a representation of the Facebook component. This provides Facebook with information about which sub-pages of our website have been visited. You can call up a complete overview of these Facebook plug-ins here: https://developers.facebook.com/docs/plugins/?locale=de_DE
On pages on which a Facebook component is integrated, Facebook receives information that you have visited this website if you were logged into Facebook at the time of the visit. This takes place independently of clicking on the Facebook component.
If such transmission is not desired, you can log out of Facebook before visiting our website.
For more information, please see Facebook's data policy at https://de-de.facebook.com/about/privacy/.
Rights of the data subjects
You have the right to obtain confirmation at any time as to whether personal data relating to you is being processed. You also have the right to obtain information about the data stored about you, its origin and recipient and the purpose of storage at any time. Information about the stored data can be obtained from the data protection officer at firstname.lastname@example.org. We will be happy to provide you with the personal data we have stored about you in a structured, common and machine-readable form.
Furthermore, you are entitled to information about the purposes of processing, the categories of personal data that are processed. Upon request, you will also receive the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations.
If the personal data is not collected from the data subject, we will provide you with all available information about the origin of the data. If possible, we will also tell you the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration.
Furthermore, we point out the existence of a right of complaint to a supervisory authority and the existence of automated decision-making including profiling pursuant to Article 22 (1) and (4) DSGVO and, in these cases, meaningful information about the logic involved as well as the scope and the intended effects of such processing for the data subject.
In addition, you have a right to correction, blocking and deletion (right to be forgotten) of this personal data in accordance with the statutory provisions. Furthermore, you can object to the processing of your data.
In the event of a deletion request, we will comply with it without delay, provided that one of the following reasons applies:
- The processing of personal data is no longer necessary
- The data subject revokes the consent on which the processing was based pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR and there is no other legal basis.
- The data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
- The personal data have been processed unlawfully.
- The deletion of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
- The personal data was collected in relation to information society services offered pursuant to Art. 8(1) DSGVO.
In case of processing of personal data for direct marketing purposes, you may object to the processing for such marketing at any time. Your data will then no longer be processed for the purpose of direct advertising.
Applications and application procedures
We collect and process personal data in the context of application procedures in order to ensure a smooth handling of this procedure. This processing may take place electronically, in particular if the application documents are transmitted electronically. If an employment contract is concluded with the applicant, the transmitted data will be stored within the framework of the statutory provisions. If no employment contract is concluded with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision. Deletion will not be carried out if other legitimate interests conflict with this (e.g. proceedings under the General Equal Treatment Act).
The storage of personal data is based on the statutory retention periods. After expiry of the period, the data is routinely deleted, provided that it is no longer required for the fulfilment or initiation of the contract.
Roxtra GmbH uses technical and organisational security measures in order to protect the data you have made available to Roxtra GmbH from accidental or intentional manipulation, loss, destruction or access by unauthorised persons and to ensure the most complete possible protection of our website. Nevertheless, we would like to point out that complete protection can never be guaranteed in the context of Internet-based data transmissions. You are therefore welcome to send us personal data by alternative means (e.g. by fax or telephone). Our security measures are continuously improved in line with technological developments.
Your trust is important to us. Therefore, we would like to answer any questions you may have regarding the processing of your personal data. If you have any questions that are not answered by this data protection declaration or if you would like more detailed information on a particular point, please contact the data protection officer at any time: email@example.com.
Tel.: 07161 50570 0
Fax: 07161 50570 29
Status: July 2020