Privacy Policy

Last update: 29.04.2021

The protection of your personal data is very important to us. For this reason, we handle your personal information responsibly in all data processing’s and comply to the legal requirements of data protection, in particular the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following privacy policy informs you about the collection and processing of your data when using the certivity website. 

 

Who is responsible for data processing on this website?

 

The data controller and service provider of this website is:

Certivity GmbH

Ungererstrasse 143

80805 München

Email: contact@certivity.io

Legal bases on which the processing on our website takes place

When processing personal data that is necessary for the performance of a contract to which you as the data subject are a party, Article 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as we obtain your consent for the processing of personal data, Article 6 (1) a DSGVO serves as the legal basis. Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which we are subject as the controller, Article 6(1)(c) DSGVO serves as the legal basis.

In the event that vital interests of you or of another natural person make processing of personal data necessary, Article 6(1)(d) DSGVO serves as the legal basis.

If the processing is necessary to protect a legitimate interest of us or a third party and your interests, fundamental rights and freedoms as a data subject do not override the first-mentioned interest, Article 6(1)(f) DSGVO serves as the legal basis for the processing.

The specific relevant legal basis for the respective processing can be found in the corresponding section of this privacy policy.

 

Which technical access data/server log files are collected and stored when using our website?

We (or our web space provider) collect and store your data about each access to the website, so-called server log files or system and usage data. The access data includes:

[name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, your operating system, referrer URL (the previously visited page), IP address and the requesting provider].

The legal basis for storing this data and the log files is Article 6 (1) lit. f DSGVO.

We use the log data only for statistical evaluations for the purpose of operation, security and optimization of our website. However, we reserve the right to subsequently review the log data if there is a justified suspicion of unlawful use based on concrete indications. These purposes also constitute our legitimate interest in data processing pursuant to Article 6 (1) f DSGVO. An evaluation for marketing purposes does not take place.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after 180 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Therefore, there is no possibility for you to refuse the consent.

Registration/Newsletter data

Personal data is only collected via our website if you provide it to us voluntarily, for example in the course of registering for our newsletter on our website.

When registering, you must provide the following information (mandatory fields):

Name, E-Mail-Address

The remaining information provided during registration is voluntary.

After submitting the registration form, you will receive a registration confirmation to the e-mail address you provided. The offer will be activated after you have clicked on the link contained in the registration confirmation, thereby confirming your e-mail address. The data you enter will be used to set up a user account that will allow you to use our offer and its functions. Your data will be retained for further use as long as you maintain your registration. You have the right to retrieve and correct your registration data and to delete it at any time.

The legal basis for the processing of the data is Article 6 (1) lit. a DSGVO if the user has given his consent. If the registration serves the fulfillment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Article 6 (1) b DSGVO.

Registration of the user is necessary for the fulfillment of a contract with the user or for the implementation of pre-contractual measures. The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.

This is the case for data collected during the registration process for the fulfillment of a contract or for the implementation of pre-contractual measures when the data is no longer required for the implementation of the contract.

Even after the conclusion of the contract, there may be a need to store personal data of the contractual partner in order to fulfill contractual or legal obligations. As a user, you have the option to exercise all data subject rights under the GDPR.

Specific purposes of use

We use the data provided by you exclusively for the following purposes:

  • technical administration of our offer

  • answering your inquiries in other respects