Privacy Policy

Thank you for visiting our website. Compliance with the data protection regulations has a special significance for us. The purpose of this privacy policy is to inform you, as the user of the website, about the nature, scope and purpose of the processing of personal data and the rights that exist for you, insofar as you, the person affected, according to Article 4 (1) of the General Data Protection Regulation applies. The following privacy policy already takes into account the revisions according to the General Data Protection Regulation (DSGVO) valid from 25.5.2018. At the same time, this declaration also fulfills the requirements of § 13 Telemediengesetz (German Teleservices Act), which had previously applied.

1. Responsible Body

This website and services are provided by the

Renumics GmbH
Haid-und-Neu-Str. 7
76131 Karlsruhe
Germany

Managing Director: Dr. Stefan Suwelack

Phone:
Email:
Website: www.renumics.com

Register court:

Mannheim District Court

Registration number: HRB 727057

2. General

The development of the website was conceptualized with the maxim to collect as little data as possible from you. Basically, it is possible to visit our website without providing personal information. Only when you choose to use certain services (such as the contact form) will the processing of personal data become necessary. When doing so, we always take care to process your personal data only in accordance with the legal regulations or your consent. We comply with the provisions of the General Data Protection Regulation (GDPR) applicable from 25.5.2018 and the applicable national regulations, such as the German Federal Data Protection Act, the German Teleservices Act or other more specific data protection laws.

3. Definition

The terms used in this Privacy Policy have the following meaning in accordance with the GDPR.

“Personal data” means any information relating to an identified or identifiable natural person (‘the data subject’); a natural person is considered as being identifiable, directly or indirectly, in particular by means of an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics expressing the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person can be identified;

“Processing” means any process or series of operations performed with or without the aid of automated processes, such as collecting, organizing, storing, adapting or modifying, reading, querying, disclosure by submission, dissemination or any other form of provision, reconciliation or association, restriction, erasure or destruction;

“Restriction of processing” means the marking of stored personal data in order to limit its future processing;

“Pseudonymization” means the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without additional information being provided, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data not assigned to an identified or identifiable natural person;

“Controller” means the natural or legal person, public authority, body or other party that alone or jointly with others decides on the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or, as the case may be, the specific criteria of his appointment may be provided for under Union or national law;

“Processor” means a natural or legal person, public authority, body or party that processes personal data on behalf of the controller;

“Recipient” means a natural or legal person, public authority, agency or other entity to whom personal data are disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union or national law in connection with a particular mission are not considered to be recipients; the processing of such data by the said authorities shall be in accordance with the applicable data protection rules in accordance with the purposes of the processing;

“Third party” means a natural or legal person, public authority, body or body other than the data subject, the controller, the processor and the persons authorized under the direct responsibility of the controller or processor to process the personal data;

“Consent” of the data subject to any expression of will, in an informed and unambiguous manner, in the form of a statement or other unambiguous confirmatory act by which the data subject expresses his understanding of the processing of the personal data concerning him agrees.

4. Consent

In part, when you visit our website, we collect certain personal data for which we require your consent. This happens, for example, if you send us a message via our contact forms.

Declaration of Consent

By using our available forms (contact, newsletter signup, demo-request), you consent to the collection and use of personal information provided by you as provided in this Privacy Policy. You can revoke this consent at any time with effect for the future by making a corresponding declaration to us. We point out, however, that use of our service without your consent is no longer possible. For your revocation, please use the above contact ways (please tell us in this case your name, e-mail and postal address).

5. Purpose and Legal Basis of the Processing of Personal Data

Personal data required for the establishment, implementation or processing of our services is processed on the legal basis of Art. 6 para. 1 lit. b DSGVO. Insofar as we use external service providers in the context of order data processing, processing is based on the legal basis of Art. 28 DSGVO.

The personal data are collected, processed and used by us exclusively for the following purposes:

6. Collected and processed personal data

We collect and process your personal data only if you voluntarily, under your knowledge, make it available, e.g. by filling out forms or sending e-mails.

In the context of the available forms, these are first of all the following data:

General contact details:

1. Surname*
2. E-mail address*
3. Message

Required fields are marked with an *.

The personal data you provide and its contents remain solely with us and our affiliates. We will store and process your data only for the purposes stated in 5. Any use exceeding the stated purpose requires your express consent. The same applies to the transmission and transfer of your data to third parties.

7. General Log Files

From the web server, temporarily the connection data of the requesting computer (IP address), the pages you visit with us, the date and duration of the visit, the recognition data of the browser and operating system type used and the website from which you visit us and recorded the successful retrieval in log files. The technical administration of the websites and anonymous statistical surveys allow an evaluation of the access to the offer of Renumics and an evaluation with the aim to increase the data protection and data security in our company in order to ensure an optimal level of protection for the personal data processed by us. The data of the server log files are stored separately from all personal data provided by you.

Subject to any legal retention requirements, we will delete or anonymize your IP address after leaving our website.

8. Integration of Services and Content of Third Parties

Our website uses content and services of third parties. These are, for example, videos provided by Youtube. In order for these data to be accessed and displayed in the user’s browser, the transmission of the IP address is absolutely necessary. The providers (hereinafter referred to as "third-party provider") thus are aware of the IP address of the respective user.

Although we strive to use only third-party providers who solely need the IP address to deliver content, we have no control over whether the IP address may be stored. This process is used in the case, inter alia, statistical purposes. If we become aware that the IP address is being stored, we will inform you.

Use of YouTube

For the integration and presentation of video content, our website uses plugins from the Google-powered YouTube page. Provider of the video portal is the YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a page with an integrated YouTube plug-in, it will connect to YouTube’s servers.

YouTube will find out which of our sites you’ve visited. YouTube can directly map your browsing behavior to your personal profile, should you be logged into your YouTube account. By logging out beforehand you have the option to prevent this.

The use of YouTube is in the interest of an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

For details on how to handle user information, please refer to the YouTube Privacy Policy.

Use of Mailchimp

The newsletters are sent via the mailing service provider “MailChimp”, a newsletter mailing platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the data protection regulations of the mailing service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy-Shield Agreement and thus offers a guarantee to comply with the European data protection level (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The mailing service provider is used on the basis of our legitimate interests in accordance with Art. 6 Para. 1 lit. f DSGVO and an order processing contract in accordance with Art. 28 Para. 3 S. 1 DSGVO.

If you register for a free download, the data used for registration will be stored in a mailchimp list for further correspondence. There will be no further processing for purposes beyond this.

The mailing service provider may use the recipient’s data in pseudonymous form, i.e. without allocation to a user, to optimise or improve its own services, e.g. for technical optimisation of the dispatch and presentation of newsletters or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to contect them itself or to pass the data on to third parties.

Use of Pipedrive Livechats and Pipedrive Scheduler

Our website integrates content and services from Pipedrive, specifically Pipedrive Livechats and Pipedrive Scheduler. These services enable us to streamline our communication, manage customer interactions effectively, and schedule appointments seamlessly. When you use Pipedrive Livechats or Pipedrive Scheduler on our website, certain personal data may be collected and processed by Pipedrive.

We strive to ensure that Pipedrive processes personal data in compliance with data protection regulations. However, please note that we do not have control over the data processing practices of Pipedrive. For detailed information on how Pipedrive handles personal data, please refer to Pipedrive's Privacy Policy.

The use of Pipedrive Livechats and Pipedrive Scheduler is in the interest of providing efficient and responsive communication with our users and customers, as well as facilitating appointment scheduling. This activity constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

We will inform you if we become aware of any significant changes to how Pipedrive processes personal data in connection with the use of Pipedrive Livechats or Pipedrive Scheduler on our website.

Use of Calendly

We also offer the option for booking appointments through Calendly, a scheduling software. When you schedule appointments through Calendly on our website, certain personal data may be collected and processed by Calendly.

We strive to ensure that Calendly processes personal data in compliance with data protection regulations. However, please note that we do not have control over the data processing practices of Calendly. For information on how Calendly handles personal data, please refer to Calendly's Privacy Policy.

The use of Calendly for appointment bookings is in the interest of providing a convenient and efficient scheduling process for our users and customers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

For details on how Calendly handles user information, please refer to Calendly's Privacy Policy.

We will inform you if we become aware of any significant changes to how Calendly processes personal data in connection with the appointment booking process on our website.

9. Data Security

Unfortunately, the transmission of information over the Internet is never 100% secure, which is why we cannot guarantee the security of data transmitted via the Internet to our website.

However, we secure our website through technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons.

In particular, your personal data is encrypted with us. We use the SSL / TLS (Secure Sockets Layer / Transport Layer Security) coding system. Our security measures are continuously improved in line with technological developments.

10. Contact

You can contact us by e-mail or via our contact form. In this case, we will store the personal data you provide to process your request and to contact you to process your request. These data will be transmitted to us on a purely voluntary basis. A passing on of the personal data communicated to us in this way to third parties does not take place.

The information for contacting us can be found above in this privacy policy and in our imprint.

Handling of Contact Form Data

When you submit data through our contact forms, we take your privacy seriously and adhere to the following procedures to ensure data protection and compliance with GDPR:

• Anonymization of Data: To protect your privacy, we anonymize your personal data before using it for any internal notifications or processing. This means that any identifiable information is altered in such a way that the personal data can no longer be attributed to you without the use of additional information.
• Notification: We use an internal notification system, such as Slack, to inform relevant team members about the contact inquiries we receive. Before these notifications are sent, your personal data is anonymized to prevent any unauthorized access to your personal information.
• Integration with Pipedrive: To manage our customer relations and marketing activities more efficiently, we add the data from contact forms to our Pipedrive account. This data is used solely for the purpose of responding to your inquiries, providing you with requested information or services, and for marketing purposes, in accordance with your consent.
• Purpose and Legal Basis: The processing of your anonymized data from contact forms is based on your consent (Art. 6 para. 1 lit. a DSGVO). You have the right to withdraw your consent at any time, with future effect.
• Data Security: We implement appropriate technical and organizational measures to ensure the security of your data, protecting it against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

By submitting your data through our contact forms, you acknowledge and agree to this processing. If you have any concerns or wish to withdraw your consent, please contact us using the details provided in this Privacy Policy.

11. Newsletter Subscription

You can subscribe to our newsletter through our website. In the newsletter, we provide updates and information about our products and services. By subscribing, you agree to receive the newsletter and the processing of your email for this purpose.

To manage our newsletter subscriptions, we use Pipedrive. When you subscribe, your email address is stored in Pipedrive, which we use to send out the newsletter. You can unsubscribe at any time by clicking the unsubscribe link in each newsletter or by contacting us directly.

Your email address will only be used for sending the newsletter and will not be shared with any third parties without your explicit consent.

12. Demo Request

You can request a demo of our solutions on several locations on our website. We will than contact you to set up a session where you can interact with the requested demo.

This process involves the collection and processing of your email address to schedule and communicate with you about the demo. Your email may be stored in our Pipedrive system to ensure effective communication and follow-up.

We value your interest in our services and commit to protecting and respecting your privacy throughout this process.

13. Rights of the data subject

Insofar as you are the affected person according to Art. 4 No. 1 DSGVO, you have the following rights regarding the processing of your personal data under the GDPR. The legal text of the rights listed below can be found here.

Right to Confirmation and Information

Under the preconditions of Art. 15 DSGVO you have the right to request a confirmation as to whether personal data of you are being processed and at any time, free of charge, receive information from the controller regarding the personal data stored about you and a copy of this information.

Right to Rectification

Under the conditions of Art. 16 DSGVO you have the right to demand the immediate correction of incorrect personal data concerning you. In addition, you have the right, under consideration of the purposes of the processing, to demand the completion of incomplete personal data, also by means of a supplementary declaration.

Right of Deletion

Under the preconditions of Art. 17 GDPR, you have the right to demand that personal data concerning you be deleted without delay, provided that one of the reasons stated in Art. 17 GDPR exists and the processing is not required.

Right to Restriction of Processing

Under the conditions of Art. 18 GDPR, you have the right to demand the restriction of processing if one of the conditions set out in Art. 18 GDPR exists.

Right to Data Portability

Under the conditions of Art. 20 GDPR, you have the right to receive the personal data you have provided us in a structured, common and machine-readable format, and you have the right to transfer this data to another person without hindrance provided that the further requirements of Article 20 GDPR are met.

Right to Revoke Consent

You have the right to withdraw your consent to the processing of personal data at any time with future effect. The revocation should be directed to the above contact details.

Right of Objection

Under the conditions of Art. 21 GDPR you have the right to object at any time to the processing of your personal data. If the conditions for an effective contradiction exist, we may no longer process them.

Right of Appeal to a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, employment or the place of the alleged infringement, if you believe that the processing of your personal data is violating the requirements of the DSGVO.

14. Disclosure of your Personal Data

The transfer of your personal data takes place as described below.

The website is hosted by an external service provider in Germany. In doing so, we ensure that data processing takes place in Germany alone. This is necessary for the operation of the website, as well as for the establishment, implementation and execution of the existing user contract and also without your consent.

In addition, disclosure shall take place if we are entitled or obliged to forward data due to statutory provisions and / or official or judicial orders. This may, in particular, be the provision of information for law enforcement purposes, security or enforcement of intellectual property rights.

Insofar as your data is passed on to service providers to the required extent, they will only have access to your personal data to the extent necessary to fulfill their duties. These service providers are obliged to treat your personal data in accordance with the applicable data protection laws, in particular the GDPR.

In addition to the aforementioned circumstances, we will not transmit your data without your consent to third parties. In particular, we do not share personally identifiable information with any third country or international organization.

15. Storage Period for the Personal Data

With regard to the storage period, we delete personal data as soon as their storage is no longer necessary for the fulfillment of the original purpose and there are no longer any statutory retention periods. The statutory retention periods ultimately form the criterion for the final duration of the storage of personal data. After the deadline, the corresponding data will be routinely deleted. If retention periods exist, processing is restricted by blocking the data.

16. References and Links

When accessing websites referred to on our website, you may again be asked for information such as name, address, e-mail address, browser properties, etc. This privacy policy does not govern the collection, transfer or handling of personal data by third parties.

Third party service providers may have different and separate terms in dealing with the collection, processing and use of personal data. It is therefore advised to check the websites of third parties before entering personal data about their practice for the handling of personal data.

17. Amendments of the Privacy Policy

We are constantly developing our website further to provide you with an ever-improving service. We will always keep this privacy policy up-to-date and adjust it accordingly, if and as far as necessary.

Of course, we will inform you in good time about any changes to this privacy policy. We will do this, e.g. by e-mail to the e-mail address you have given us. In addition, if you require further consent from us to handle your data, we will, of course, obtain this from you before appropriate changes take effect.

You can access the latest version of our Privacy Policy at any time on the Internet here.