Privacy Policy

1 Introduction and general information

Thank you for your interest in our website. The protection of your personal data is important to us. Below you will find information on how we handle your data that is collected through your use of our website. Your data will be processed in accordance with the GDPR. Insofar as links are provided to other websites, we have neither influence nor control over the linked contents and the data protection regulations there. We recommend checking the privacy policies on the linked websites to determine whether and to what extent personal data is collected, processed, used, or made available to third parties.

2 Controller (in the sense of the GDPR)

ndgit GmbH
Mies-van-der-Rohe-Str. 6
80807 Munich
info@ndgit.com
+49 89 1250155 60

3 Contact details of our Data Protection Officer

Proliance GmbH / www.datenschutzexperte.de
Datenschutzbeauftragter
Leopoldstr. 21
80802 Munich
datenschutzbeauftragter@datenschutzexperte.de

4 Definitions

In principle, our privacy policy should be simple and understandable for everyone. For this reason, our privacy policy generally uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in Art. 4 GDPR.

5 Server-Logfiles

Once you visit our website, it is technically necessary that data is transmitted to our web server via your internet browser. The following data is recorded during an active connection for communication between your internet browser and our web server

• Date and time of the request
• Name of the requested file
• Page from which the file was requested
• Access status
• Web browser used and operating system used
• (Full) IP address of the requesting computer
• Transmitted amount of data

We collect the listed data in order to guarantee a frictionless connection establishment and to enable a comfortable use of our website by the users. The log file also serves for evaluating system security and stability as well as administrative purposes. The legal basis for the temporary storage of data or log files is Art. 6 para. 1 lit. (f) GDPR.

For reasons of technical security, in particular to prevent attempts to attack our web server, we store these data temporarily.

6 Cookies

Our website uses cookies. We use cookies to personalize content and ads, to be able to offer functions for social media and to analyze access to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data that you have provided to them or that they have collected as part of your use of the services.

Cookies are small text files used by websites to make the user experience more efficient.

According to the law, we can save cookies on your device if they are absolutely necessary for the operation of this page. We require your permission for all other types of cookies.

This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages.

You can change or withdraw your consent at any time from the cookie statement on our website.

Please provide your consent ID and the date when you contact us regarding your consent.

Your consent applies to the following domains: docs.apps.ndgit.com

Your current consent status:

No consent given (Cookies not allowed)

(Refresh the page if you changed your consent)

Change Consent

The cookie statement was last updated on June 30th, 20:

6.1 Statistics (1)

Statistics cookies help website owners understand how visitors interact with websites by collecting and reporting information anonymously.

7 Google Analytics

We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. (“Google”). Google Analytics uses so-called cookies. These are text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area, which means that it is not possible to identify the user. Google is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the level of data protection applicable in the EU. Insofar as you have given your consent to this in accordance with Art. 6 para. 1 lit. (a) GDPR, the processing on this website is carried out for the purpose of analyzing it. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on the activities of the website and to provide further services to us in connection with the use of the website and related services. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google. The terms of use of Google Analytics and information on data protection can be accessed via the following links: https://marketingplatform.google.com/about/analytics/terms/us/ and https://policies.google.com/?hl=en&gl=de. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the URL https://tools.google.com/dlpage/gaoptout?hl=en. A click on the link prevents the collection by Google Analytics by setting a so-called opt-out cookie. More information on the handling of user data at Google Analytics can be found in the Google’s Privacy Policy https://policies.google.com/privacy?hl=en.

8 HubSpot

We use HubSpot for our online marketing activities. This is an integrated software solution with which we cover various aspects of our online marketing.

These include among others:

• Content Management (website and blog)
• E-mail marketing (newsletters and automated mailings, e.g. to provide downloads)
• Social Media Publishing & Reporting
• Reporting (e.g. traffic sources, accesses, etc. …)
• Contact management (e.g. user segmentation & CRM)
• Landing Pages and Contact Forms

Our registration service allows visitors to our website to learn more about our company, download content and provide your contact information and other demographic information.

This information, as well as the content of our website, is stored on servers of our software partner HubSpot. We may use this information to contact visitors to our site and to determine which of our services may be of interest to you.

All information collected by us is subject to this privacy policy. We use all collected information exclusively to optimize our marketing. Insofar as you have given your consent to this in accordance with Art. 6 para. 1 lit. (a) GDPR, the processing on this website is for the purpose of website analysis.

HubSpot is a software company from the USA with a branch in Ireland. (Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland, telephone: +353 1 5187500.)

HubSpot is certified under the “EU - U.S. Privacy Shield Framework” and is subject to TRUSTe’s Privacy Seal and the “U.S. - Swiss Safe Harbor” framework.

You can permanently object to the collection of data by HubSpot and the setting of cookies by preventing the storage of cookies through your browser settings accordingly. You may object to the processing of your personal data at any time with effect for the future by sending an e-mail to privacy@ndgit.com.

9 Release Updates Newsletter

You have the possibility to subscribe to the release updates newsletter of our company on the website. Which personal data will be transmitted to us when subscribe to the newsletter is determined by the input mask used for this purpose.

ndgit GmbH informs its customers and business partners about the latest release notes in regular intervals by means of a newsletter. In principle, the newsletter of our company can only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers to receive the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address registered for the first time by a data subject for the purpose of receiving the newsletter using the double opt-in procedure. This confirmation mail is used to check whether the owner of the e-mail address has authorized the receipt of the newsletter as a data subject.

When signing up for the newsletter, we also save the IP address assigned by the Internet service provider (ISP) of the computer system used by the data subject at the time of registration, as well as the date and time of the registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of a data subject’s e-mail address at a later date and therefore serves to provide legal protection for us.

The personal data collected during registration for the newsletter is used exclusively for sending our newsletter. In addition, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or for registration, as might be the case if there are changes to the newsletter offer or if technical conditions change. The personal data collected within the scope of the newsletter service will not be passed on to third parties. The subscription to our newsletter can be withdraw by the data subject at any time. The consent to the storage of personal data, which the data subject has given us for the newsletter service, can be withdraw at any time. For the purpose of the withdrawal the consent, a corresponding link is included in every newsletter. It is also possible to inform us of the withdrawal of consent by e-mail to privacy@ndgit.com.

You can withdraw your consent to receive the newsletter at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. To do so, you must simply inform us of your withdrawal or click on the unsubscribe link contained in every newsletter.

Our e-mail newsletters are sent via the technical service provider HubSpot Ireland Limited, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland (“HubSpot”), to whom we pass on the data provided by you in the newsletter registration. This disclosure is in accordance with Art. 6 para. 1 lit. (f) GDPR and serves our legitimate interest in the use of an effective, secure and user-friendly newsletter system. The data you enter to subscribe to the newsletter (e.g. e-mail address) will be stored on the servers of HubSpot in Germany.

HubSpot uses this information to send and statistically evaluate the newsletter on our behalf. For evaluation purposes, the e-mails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. In this way it can be determined whether a newsletter message was opened, and which links were clicked on, if applicable. Conversion tracking can also be used to analyze whether a previously defined action (e.g. sending a consultation form on our website) was carried out after clicking on the link in the newsletter. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). The data is only collected pseudonymously and is not linked to your other personal data, a direct personal reference is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

We have concluded a contract with HubSpot in which we commit HubSpot to protect the data of our customers and not to disclose it to third parties.

If necessary, data may be transferred to HubSpot Inc. in the USA. HubSpot is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. For more information, please see HubSpot’s privacy policy at https://legal.hubspot.com/privacy-policy.

10 Data Transfer and Recipients

Your personal data is not transferred to third parties, unless

1. we have explicitly pointed this out in the description of the respective data processing.
2. you have given your explicit consent in accordance with Art. 6 para. 1 lit. (a) GDPR,
3. the transfer pursuant to Art. 6 para. 1 lit. (f) GDPR is necessary for the assertion, exercise or defense of legal claims and our legitimate interests are not overridden by your fundamental rights and freedoms,
4. there is a legal obligation to transfer data pursuant to Art. 6 para. 1 lit. (c) GDPR,
5. required by Art. 6 para. 1 lit. (b) GDPR for the execution of contractual relationships with you.

In addition, we use external service providers for the processing of our services, whom we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly monitored by us. Required data processing agreements pursuant to Art. 28 GDPR are concluded before the commission. In particular these contracts concern web hosting services, the dispatch of e-mails and IT services and maintenance. Your personal data will not be transferred to third parties by our service providers.

11 Security of processing

Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of data subjects, we take appropriate technical and organizational measures to ensure a level of security appropriate to the risk in accordance with Art. 32 GDPR. For reasons of security and to protect the transmission of confidential content, this website uses SSL encryption or the Transport Layer Security Standard.

12 Storage period

The period for which the personal data will be stored is determined by the relevant statutory storage periods (e.g. from commercial law and tax law). The corresponding data is deleted routinely upon expiry of the respective period. If data is required for the fulfilment of a contract or contract initiation, or if we have a legitimate interest in further storage, the data will be deleted if they are no longer required for these purposes or if you make use of your right to withdraw or object.

13 Your rights

Below you will find information on the rights the applicable data protection law grants you with regard to the processing of your personal data.

1. The right to request information about your personal data processed by us pursuant to Art. 15 GDPR. In particular, you can request information on the purpose of processing, the category of personal data being processed, the categories of recipients to whom your data has been disclosed, the planned retention period, the right to rectification or erasure of personal data, or restriction of processing of your data, the right to lodge a complaint, what the source of the data is, if it wasn’t collected by us, and if any automated decision-making, including profiling exists and, where appropriate, meaningful information about their details.
2. The right, in accordance with Art. 16 GDPR, to demand the correction of incorrect or completion of incomplete personal data stored by us without delay.
3. The right to demand the deletion of your personal data stored with us, according to Art. 17 GDPR, as far as the processing is not required for the right of freedom of expression and information, the compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.
4. The right to demand the restriction of the processing of your personal data, in accordance with Art. 18 GDPR, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you oppose the erasure and we no longer need the data, but they are required by you for the establishment, exercise or defense of legal claims or you have lodged an objection against the processing pursuant to Art. 21 GDPR.
5. The right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our above-named company domicile or, if applicable, your usual place of residence or workplace.
6. Right to withdraw granted consent pursuant to Art. 7 para. 3 GDPR: You have the right to withdraw the previously given consent in the processing of data at any time with effect for the future. In the case of withdrawal, we will delete the data concerned immediately, as far as further processing cannot be based on a legal basis where consent is not required for processing. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;

14 Right to object

If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. (f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as this is for reasons that arise from your particular situation. If you object to the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement of specifying a particular situation. If we process your personal data on the basis of your consent according to Article 6 para. 1 lit. (a) GDPR, you have the right according to Article 7 para. 3 GDPR to withdraw your consent to us at any time. As a result, we are no longer allowed to continue processing data based on this consent in the future. If you wish to make use of your right of revocation or objection, an e-mail to privacy@ndgit.com is sufficient.

15 Versions, Modification of this Privacy Policy

We reserve the right to change this Privacy Policy at any time in accordance with the law. In this way, we can adapt it to current legal requirements and take changes in our services into account, e.g. when introducing new services. When we make changes to this Policy, we will inform users on our website, via app or via e-mail. The most current version applies to your visit.

This version of this policy is effective as of June 30, 2020