Data Protection Notice
Below, we would like to explain to you which data we collect about you and what we do with this data. We also inform you of your privacy rights and clarify to whom you can turn to with questions about data protection.
About us
Data controller (responsible for data processing):
Permodo GmbH
Derendorfer Allee 6
40476 Düsseldorf
email: [email protected]
phone: +49 211 542690-0
Representative:
Thorsten Schüttler
Concerning questions about this Data Protection Notice, the processing of your data, your rights or other data protection topics, our data protection officer (DPO) is available to help you.
Contact details of our data protection officer:
Permodo GmbH
Derendorfer Allee 6
40476 Düsseldorf
email: [email protected]
Scope of application
This privacy policy applies to the website permodo.com and addresses visitors to this website.
Our website offers links which lead to the websites of other operators for which this Data Protection Notice does not apply.
Responsibility for the integration of advertisements, text advertisements or commercials before or during embedded videos lies with the respective operator.
Do I have to enter my data?
When you visit our website, user data is automatically stored. Some of the collected data is necessary for the use of a website. In addition, we also process your data in order to safeguard our legitimate interests according to a balance of interests. This will enable us to continuously improve the services we offer to you. On the following pages, you will learn about the background of our interests as well as if and how you can object to the use of your data or disable the use of the data.
In order to avail of one of our offers or to send a request, you will be asked to provide your personal data. You can decide for yourself whether to take advantage of these offers and to provide your data. We also offer services for which we process your data only if you have given us your consent. The granting of consent is always voluntary. Consent that has been granted may be revoked at any time.
Please note that if you provide information about other persons, you must have obtained their prior approval and informed them of the purposes for which the information is being disclosed, as set forth in this Data Protection Notice.
We also ask you to share this information with the people you include in the use of our services, such as family members or authorised persons.
Processing purposes, processed data and legal bases
We distinguish between various types of processing personal data, which are described below. The processed data and cookies are listed in tables.
Service provision
In order to visit and use our website, the specified data must be collected. We process this data to fulfil the contract-like relationship of trust so you can use our service, i.e. our website (Art. 6 (I) b) GDPR).
Data security
Every access to our website is stored in a log file. We process this data for the purpose of data security. Processing your data for that purpose is based on our legitimate interest in guaranteeing data security (Art. 6 (I) f) GDPR).
Inquiries
We process your data that you give us when you have a question or another concern. This may include data that you send us via email. Processing your data is required for dealing with your concern. We process your data within the framework of a contract-like relationship of trust or for the initiation or performance of a contract (Art. 6 (I) b) GDPR).
Optimisation of the website incl. profiling
If you give your consent, we use Google Analytics, a service provided by Google Ireland Ltd (hereafter referred to as “Google”) to measure and evaluate the user behaviour on our website. This optimises the usability of the website. Cookies are also set for this purpose. The processing is based on your consent (Art. 6 (I) a) GDPR).
Access to your data from or storage in countries with a different level of data protection compared to the EU cannot be excluded. Google may merge this information with other data that you have provided to Google or that Google has collected as part of your use of their services. The data can also be used by Google for their own purposes, in particular for the analysis of user behaviour or for market research and marketing purposes.
Information about Cookies
The legal basis for using cookies that are necessary for providing the website lies upon our legitimate interest (Art. 6 (I) f) GDPR) in providing a working website. Other cookies will not be placed unless you give us your consent (Art. 6 (I) a) GDPR).
For more information about the individual cookies and their lifecycles, please refer to Consent Manager, where you can also change or withdraw your consent any time.
Ad of the Year and Give-Away
We process your data when you participate in our “Ad of the Year” competition and thus in our give-away in order to determine the winners. An email address is required to avoid repeated voting. Winners of the give-away will be contacted to ask for further information in order to hand over or redeem the prize (e.g. further contact details). The legal basis for processing your personal data for this purpose is the fulfilment of the contract (Art. 6 (I) b) GDPR).
Processed Data
|
Data |
Service provision |
Data security |
Inquiries |
Video display |
Optimisation of the website incl. profiling |
Ad of the Year and Give-Away |
|
IP address |
x |
x |
|
x |
x |
|
|
Name of the accessed file |
|
x |
|
x |
|
|
|
Transferred data volume |
|
x |
|
x |
|
|
|
Accessed website |
x |
|
|
|
x |
|
|
Referrer URL (the previously visited website) |
|
x |
|
x |
x |
|
|
Device |
|
|
|
|
x |
|
|
Google Click ID |
|
|
|
|
x |
|
|
Operating system |
|
|
|
|
x |
|
|
Screen size |
|
|
|
|
x |
|
|
Session duration |
|
|
|
|
x |
|
|
User agent sent by your browser |
x |
x |
|
x |
x |
|
|
Cookies (see “information about cookies” for details) |
x |
|
|
x |
x |
|
|
Date and time of access |
|
x |
|
x |
x |
|
|
Information about your browser ( type, version, resolution (inner window size), browser language) |
x |
|
|
|
|
|
|
Cookies on/off |
x |
|
|
|
|
|
|
Java script on/off |
x |
|
|
|
|
|
|
Form of address, name |
|
|
x |
|
|
x |
|
Contact details (email address, address, phone number, fax number) |
|
|
x |
|
|
x |
|
Subject, topic, concern |
|
|
x |
|
|
|
|
Message contents |
|
|
x |
|
|
|
|
Time stamps of incoming message/vote |
|
|
x |
|
|
x |
|
Vote |
|
|
|
|
|
x |
Other processing purposes
In addition, the above-mentioned data is used for the following purposes in the context of a balance of interests (Art. 6 (I) (f) GDPR). The interests are described below:
- Should a security incident occur in our company that affects your data, we are obliged to report the case to our data protection supervisory authority (Article 33 GDPR). Since our legitimate interest is to comply with this statutory reporting obligation as quickly as possible, it may happen that in the context of the investigation of the corresponding security incident data about you are processed. Reports of these security incidents to data protection supervisory authorities do not contain any of your personal data.
- As it is in our interest to ensure the security of our systems, we regularly conduct security and efficiency tests that allow us to process your above-mentioned data.
- Since it is our interest to solve legal disputes, we process your data in that specific case. It is also in our interest, in the event of litigation, to keep evidence until all relevant statutory limitation periods pursuant according to sections 195 and following of the German Civil Code, have expired. For this purpose, we retain the relevant data about you in accordance with these limitation periods. The retention periods cannot be globally predicted, as they depend on the particular matter in dispute and the respective statutory limitation period, which can be up to 30 years. The regular limitation period is three years.
- In addition, it is in our interest to investigate suspicious cases and to hand over relevant information to law enforcement authorities in case of a specific criminal suspicion.
- We perform (internal) audits and other control activities (e.g. data protection officer’s monitoring activities), because it is our legitimate interest to comply with legal provisions, to obtain transparency about our business processes, to constantly optimise these processes and to prevent and identify harmful acts against our business. In doing so, documents or data sets with your personal data may be processed.
- We process your data for testing IT systems and software products and for migrations. The processing is necessary for satisfying our legitimate interest in evaluating if new products are correct and if migrations are complete.
Deletion period (or retention period)
The data processed for the purpose of data security will be deleted after 30 days.
Personal data processed for handling enquiries will be deleted after completion of the enquiry.
The data processed for the purpose of optimising our website incl. profiling will be deleted after 6 months.
The data processed in the context of votings and give-aways will be deleted after the conclusion of the voting and give-away. The data of give-away winners will be deleted after the prize has been handed over.
For the preservation of evidence, we retain data in accordance with the statutory limitation periods according to sections 195 and following of the German Civil Code. The storage duration of your data may exceed the duration stated above. The statutory limitation periods can be up to 30 years. The normal limitation period is 3 years.
Sources of data
We do not collect your personal data from third parties.
Information about automated individual decision-making
There are no automated individual decisions.
Who receives your data?
The following list shows which organisations (“data recipients”) receive your data. You can read about the specific data in the corresponding sections of this data protection notice. Transfer of your data may sometimes occur due to contractual or legal requirements. In other cases, we use selected agents and service providers who work for us as commissioned data processors (in accordance with Art. 28 GDPR) and may obtain access to your data in the required scope. Commissioned data processors are subject to numerous contractual obligations and may, in particular, process your personal data only on our instructions and solely for the fulfilment of the orders received from us.
- Auditors
- Data protection officer
- Service providers for mass file destruction
- Service providers for optimisation of our website
- Recipient’s e-mail provider (for communication via e-mail)
- IT service providers
- Lawyers, law enforcement agencies, public prosecutor, courts, opposing lawyers, state or federal criminal police (for legal disputes or actual suspicious cases only)
- Service providers for telecommunication (in case of communication via phone)
- Shipping providers (in case of written communication)
Data recipients in non-EU countries
Our IT service providers has affiliates or subcontractors outside the EU who can access your data. The EU commission decides which non-EU-countries (third countries) have an adequate level of data protection. The transfer uses the EU standard contractual clauses (SCCs) according to Commission Decisions 2010/87/EU and (EU) 2021/914, the model of which can be found on the websites of the European Commissioner for Justice and in the Official Journal of the EU.
This website uses Google Analytics, a service by Google Ireland Ltd. (hereafter referred to as “Google”) if you give us your consent for that purpose. Information about your use of this website will be transferred to Google and cookies will be placed on your device. The collected data may be used by Google for analysing user behaviour for marketing or market research purposes. Access to these data from or storage in countries with a level of data protection that deviates from that of the EU cannot be excluded. Please find further information about the use of personal data by Google in Google’s Privacy Policy.
Your rights
You have the legal right to:
- Access to your personal data that we process (Art. 15 GDPR)
- Rectification and completion of your data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Withdrawal of your consent (Art. 7 GDPR) with effect for the future. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
- You have the right to demonstrate your own point of view and argue a decision made on the basis of an automated process (Art. 22 GDPR).
- You also have the right to object to the processing of your data which is based on our legitimate interests or the legitimate interests of a third party at any time, on grounds relating to your particular situation (Art. 21 GDPR). This also applies to profiling based on these provisions within the meaning of Art. 4 (4) GDPR.
- Objection to direct marketing – You have the right to object to the processing of your data for the purpose of direct marketing at any time without giving reasons.
To exercise these rights, you can contact us via the contact details mentioned above.
You also have the legal right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
Last update: August 2022