1. Collection of personal data
2. Name and address of the data controller
The controller as per Art. 4 (7) EU General Data Protection Regulation (GDPR) is Spaceopal GmbH, Arnulfstraße 58, D-80335 München, Telephone: +49(0)8941118560, Email: firstname.lastname@example.org (see our Imprint).
3. Contact details of the data protection officer
You can reach out to our data protection officer by sending an email to email@example.com or a letter to our postal address for the attention of the “Data Protection Officer”. Any data subject can contact our data protection officer with questions or comments regarding data protection directly at any time.
4. Your rights
a) You have the following rights regarding the personal data relating to you:
• Right of access to information (Art. 15 GDPR),
• Right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR),
• Right to restriction of processing (Art. 18 GDPR),
• Right to object to the processing (Art. 21 GDPR),
• Right to data portability (Art. 20 GDPR).
b) Moreover, you have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent data protection supervisory authority for Spaceopal GmbH is the Bavarian State Authority on Data Protection for the Private Sector (firstname.lastname@example.org).
5. Collection of personal data during visits to our website in general
Where your use of our website is purely for information purposes, i.e. if you do not register or otherwise send us information, we only collect data which your browser sends to our server. When you choose to view our website, we collect the following data, which we require for technical reasons in order to display our website to you and to ensure stability and security (the legal basis for this is Art. 6 (1) (f) GDPR):
• IP address
• Date and time of your request
• Time zone difference to GMT
• Content of the request (specific page)
• Access status/HTTP status code
• Volume of data transferred in each case
• Website from which the request comes
• Operating system and its interface
• Language and version of the browser software.
In addition to the data mentioned above, when you use our website, cookies are stored on your computer. Cookies are small text files which are stored on your hard drive and associated with the browser you use and through which certain information flows to the entity which sets the cookie (in this case us). Cookies cannot run any programmes or transfer viruses to your computer. Their purpose is to make the website more user friendly and improve its efficiency (the legal basis for this is Art. 6 (1) (f) GDPR).
a) This website uses the following types of cookie, the extent and mode of functioning of which are explained below:
• Transient cookies (see b) below)
• Persistent cookies (see c) below)
b) Transient cookies are automatically deleted when you close your browser. They include, in particular, session cookies. Session cookies store a so-called session ID which allow different requests from your browser to be attributed to the same session. This enables your computer to be recognised if you return to our website. Session cookies are deleted when you log out or close your browser.
c) Persistent cookies are deleted automatically after a preset period of time which can differ from cookie to cookie. You can delete these cookies using the security settings of your browser.
d) You can tailor your browser settings to your preferences and, for example, accept or reject third-party cookies or all cookies. We would like to note that by blocking cookies you may not be able to use all of the functions of this website.
7. Data privacy provisions on use of Google Analytics
a) This website uses Google Analytics, a web analysis service of Google Inc. (hereinafter “Google”). Google Analytics uses so-called “cookies,” text files that are stored on your computer and allow an analysis of how you use our website. Information about your use of this website generated by the cookie will generally be transferred to a Google server in the United States and stored there. If IP anonymization is activated on this website, your IP address will however first be masked by Google in member states of the European Union or other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the United States and masked there. On behalf of the operator of this website Google will use such information to analyze your use of the website, to compile reports about website activity, and to provide the website operator with additional services related to website use and Internet use.
b) The IP address transmitted by your browser in connection with Google Analytics will not be merged with any other data of Google.
c) You may block cookies by selecting the appropriate settings in your browser; we advise you however that if you do so, you may no longer be able to use all features of this website to the full extent. Moreover, you may prevent Google from collecting data related to your use of the website and generated by the cookie (including your IP address) and from processing such data by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
d) This website uses Google Analytics with the extension “_anonymize Ip().” As a result, IP addresses are masked before being processed, thereby ruling out that an IP address can be correlated with any particular individual. To the extent that data about you relate to your personally, such correlation will therefore be immediately prevented and such personal data will be promptly deleted.
e) We use Google Analytics to be able to analyze and continuously improve use of our website. Statistical data from Google Analytics allow us to improve our products and services and make them more interesting to you, the user. In exceptional cases where personal data are transferred to the United States, Google has committed to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for using Google Analytics is Art. 6 para. 1 sent. 1 let. f) GDPR.
g) This website also uses Google Analytics for analyzing visitor flows across devices via a user ID. You can block this analysis by selecting the appropriate settings in your customer account under “My Data” and then “Personal Data.”
8. Collection of personal data when you contact us by email or via the User Helpdesk
When you contact us by email or using contact form, the data you provide (name and email address) as well as your message is stored by us to enable us to answer your questions. We delete the data collected in this context once it is no longer necessary for us to store it, or we restrict the processing where statutory data retention periods exist.
If the request is based on rights of the data subject under the German Freedom of Information Act (Informationsfreiheitsgesetz) or on other rights of access to information under public law, the legal basis for the processing is Art. 6 (1) (c) GDPR. Other requests which are not answered as part of the fulfilment of tasks in the public interest, will be answered at the request of the data subject and constitute a service of Spaceopal GmbH; the legal basis for the aforementioned data processing is, in this case, Art. 6 (1) (f) GDPR.
9. Setting up a user account
a) You may voluntarily set up a user account in order to receive full access to the NAVCAST BETA tool. If you register on our website, we collect and store your first name and surname, your company and country as well as your email address. In addition, we are able to determine when you last logged in to the NAVCAST BETA tool.
b) We store the aforementioned data for the purposes of contacting you in the event of problems and updates of the NAVCAST BETA tool as well as for statistical purposes in connection with user management.
c) We collect, store and process the data mentioned above on the basis of Art. 6 (1) (b) and (f) GDPR.
d) The data is stored for as long as the user retains the user account. If the user demands the deletion of the user account, the account and the user data will be deleted deleted.
a) If you subscribe to our e-mail newsletter, we ask you to give your consent that we may send you our e-mail newsletter and for this purpose collect the e-mail address you provided at registration and as long as it is necessary to subscribe to the e-mail newsletter, to send it and to terminate the subscription. The newsletter may cover news about new developments and services related to the NAVCAST BETA tool.
b) The legal basis for the processing mentioned above is Art. 6 (1) (a) GDPR.
c) To register for our e-mail newsletter we use the so-called double opt-in procedure, i.e. we will not send you our newsletter by e-mail until you have confirmed your subscription. We will send you an e-mail with an activation link and give you the opportunity to confirm that you wish to receive our e-mail newsletter by clicking on this activation link.
d) If you no longer wish to receive e-mail newsletters from us, you may revoke your consent at any time, without giving any reason, for the future. For the revocation just send us the revocation in text form to the addresses (fax, email, letter) provided in the Imprint.
e) With each e-mail newsletter, you will be notified of the possibility of revocation as outlined above. If we offer an unsubscribe link, you can also revoke your consent by clicking on such link.
11. General information on the duration of storage of personal data
We process and store personal data of the data subject only for the period necessary to achieve the purpose of the storage or the period stipulated by law (e.g. mandatory information retention periods under tax law and commercial law, to the extent such periods apply). If the purpose of storage ceases to exist or upon expiry of the stipulated storage period, the personal data is routinely blocked or deleted according to the relevant statutory provisions.
12. TLS encryption
The website uses TLS1.2 encryption. The purpose of this encryption is to provide security and protection for the transmission of confidential data. For instance, this encryption is activated when you send us an enquiry via our website.
13. Processing of data in non-EU/EEA countries
The processing and use of data takes place exclusively in the territory of Germany, in a Member State of the European Union or in another country which is a party to the Agreement on the European Economic Area.
14. Use and disclosure of personal information
Any use of personal data occurs only for the aforementioned purposes and to the extent necessary to achieve these purposes.