Privacy policy for business partners for registration on bohris.cloud (version 01/2020) - bohris.cloud

General information

The protection of your personal data is of utmost importance to ESK GmbH. For this reason, we conduct our data processing in accordance with the laws on data protection and data security. In the following, you will learn what information we process about you and how we handle this information.

Responsible

ESK GmbH
Florianstraße 15 – 21
44139 Dortmund
Germany

Contact the data protection officer: info@bohris.cloud

Purpose of data processing

We require your personal data for registration and use of our online platform bohris.cloud. The data is processed for initial registration, login and use of the platform.
This data processing is carried out as part of the registration for the product and thus on the basis of your contractual relationship with your employer and our contract between you as user and us as provider (Art. 6 (1) b DS-GVO).
Should information about our products and services be of interest in this context, you will also receive this information. You can object to the sending of such information at any time.
If you give us your consent, for example to receive our newsletter, you have the right to object to this consent at any time with effect for the future.

Categories of data

We process the following personal data for the above-mentioned purposes:

Title, name, address,
Company affiliation, function in the company
Contact details (e-mail address, telephone numbers)
Username and password
Technical (plant) data-Log data (within the scope of the registration)

Data recipients, service providers and data transfers to third countries

To support the operation of the online platform, your personal data will also be processed by commissioned service providers (such as IT service providers). ESK GmbHobliges contracted service providers accordingly to comply with data protection and security requirements.
ESK GmbHhas individual tasks and services carried out by carefully selected and commissioned (IT) service providers who are also based outside the EU. In these cases personal data is transferred to third countries. The transfer of personal data to third countries is carried out in compliance with the data protection regulations of the EU and national law. To this end, data protection agreements that meet the legal requirements and establish an appropriate level of data protection are contractually agreed with the contractual partners (including EU standard contractual clauses). You have the option of requesting further information and receiving copies of the relevant agreements at any time.

Web Analytics, Monitoring and Optimization

Web analytics (also referred to as “audience measurement”) is used to evaluate visitor flows on our online offering and may include pseudonymous data about visitor behavior, interests, or demographic information such as age or gender. Through audience measurement, we can identify, for example, when our online offering or its features and content are most frequently used or encourage repeated use. It also enables us to determine which areas require optimization.

In addition to web analytics, we may use testing procedures to evaluate and optimize different versions of our online offering or its components.

Unless otherwise stated below, profiles (i.e., data aggregated into a usage process) may be created for these purposes, and information may be stored in a browser or on a device and subsequently read. The collected data includes, in particular, visited websites and elements used there, as well as technical details such as the browser used, the operating system, and usage times. If users have consented to the collection of their location data by us or by providers of services we use, location data may also be processed.

Furthermore, users’ IP addresses are stored. However, we use an IP masking procedure (i.e., pseudonymization by shortening the IP address) to protect users. In general, no clear user data (such as email addresses or names) is stored during web analytics, A/B testing, and optimization—only pseudonyms. This means that neither we nor the providers of the software used know the actual identity of the users, only the information stored in their profiles for the respective procedures.

Legal Basis

If we request users’ consent for the use of third-party services, the legal basis for data processing is consent. Otherwise, user data is processed based on our legitimate interests (i.e., interest in efficient, economical, and user-friendly services). Please also refer to the information on the use of cookies in this privacy policy.

Types of data processed: Usage data (e.g., page views and dwell time, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and features). Meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, involved parties).
Data subjects: Users (e.g., website visitors, users of online services).
Purposes of processing: Audience measurement (e.g., access statistics, recognition of returning visitors); profiles with user-related information (creation of user profiles); remarketing.
Retention and deletion: Deletion according to the section “General Information on Data Storage and Deletion.” Storage of cookies for up to 2 years.
Security measures: IP masking (pseudonymization of IP addresses).
Legal basis: Consent (Art. 6(1)(a) GDPR). Legitimate interests (Art. 6(1)(f) GDPR).

Further Information on Processing, Procedures, and Services

Matomo: Matomo is software used for web analytics and audience measurement. When using Matomo, cookies are generated and stored on users’ devices. The data collected through Matomo is processed exclusively by us and not shared with third parties. Cookies are stored for a maximum of 13 months: https://matomo.org/faq/general/faq_146/; Legal basis: Consent (Art. 6(1)(a) GDPR). Data deletion: Cookies have a maximum storage duration of 13 months.

Social Media Presence (YouTube)

We maintain online presences within social networks and process user data in this context to communicate with active users or provide information about us.

Please note that user data may be processed outside the European Union. This may pose risks for users, for example, because enforcing user rights could be more difficult.

Furthermore, user data within social networks is generally processed for market research and advertising purposes. For example, usage profiles may be created based on user behavior and resulting interests. These profiles may, in turn, be used to display advertisements inside and outside the networks that are presumed to match users’ interests. Cookies are typically stored on users’ devices for this purpose, recording user behavior and interests. Additionally, usage profiles may also store data independently of the devices used by users (especially if they are members of the respective platforms and logged in).

For detailed information on the respective processing methods and opt-out options, please refer to the privacy policies and notices of the operators of the respective networks.

Types of data processed: Contact data (e.g., postal and email addresses or phone numbers); content data (e.g., text or image messages and posts, including related information such as authorship or creation time). Usage data (e.g., page views and dwell time, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and features).
Data subjects: Users (e.g., website visitors, users of online services).
Purposes of processing: Communication; feedback (e.g., collecting feedback via online forms); public relations.
Retention and deletion: Deletion according to the section “General Information on Data Storage and Deletion.”
Legal basis: Legitimate interests (Art. 6(1)(f) GDPR).

Further Information on Processing, Procedures, and Services

YouTube: Social network and video platform; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal basis: Legitimate interests (Art. 6(1)(f) GDPR); Privacy policy: https://policies.google.com/privacy; Third-country transfer basis: Data Privacy Framework (DPF). Opt-out option: https://myadcenter.google.com/personalizationoff.

Opposition and deletion of data

We will be happy to provide you with information about the data we have stored about you.In accordance with the statutory provisions, you can assert the following additional rights: Correction, restriction of processing (blocking for certain purposes), data transferand objection to processing.If you have given us your consent, you can revoke it at any time with effect for the future.Your personal data will be deleted from the online platform after deregistration. Log data will be deleted after 3 months at the latest. Furthermore, you have a right of complaint to a data protection supervisory authority. You are also welcome to contact our data protection officer first.

Do you have any questions?

If you have any questions about this privacy policy or the processing of your personal data, please contact info@bohris.cloud. Please also use this address if you have any objections, comments, corrections, inspection or additions to the data collected from you.