Note: This is just a legally non-binding translation of our original privacy policy for the purpose of information. 
Our official, legal privacy statement is only available in german language. 
You may access our official privacy statement here.

This privacy policy informs you about the type, scope and purpose of processing personal data within our website and the websites, functions and contents connected to it as well as external websites, such as our profiles on social media networks and platforms.

• "awisto" and/or "we" refers to awisto business solutions GmbH, Mittlerer Pfad 4, 70499 Stuttgart, Germany as the responsible party offering this website.
• "Newsletter" means newsletters, e-mails and other electronic notifications with promotional information.
• "Personal data" or "data" in the sense of this privacy policy means personal data according to art. 4 number 1 DSGVO.
• "You" means the visitor or user of the website.
• "Website" means the homepage of awisto including its subpages, accessible under the URL www.awisto.de.

For the terms used in this privacy policy (e.g. "processing", "responsible person" etc.) the definitions in Art. 4 of the basic data protection regulation (DSGVO) apply.

awisto collects, processes and uses your personal data in compliance with the applicable data protection law. As far as awisto collects, processes and/or uses personal data, this is always done for the intended purpose.

1 person in charge

awisto business solutions GmbH

represented by the managing directors Ingolf Blocher and Kaj Mähner, Mittlerer Pfad 4, 70499 Stuttgart, Germany

2 Purposes and legal basis of data processing

2.1 We process the following types of data

• Inventory data (e.g. first and last names, addresses)
• Contact details (e.g. e-mail, telephone numbers)
• Content data (e.g. text input)
• Usage data (e.g. websites visited, access times)
• Meta/communication data (e.g. device information, IP addresses)

2.2 Purposes of processing personal data

• Provision of our website, its functions and contents
• Processing of inquiries via our contact form
• Security measures
• Marketing (also in the form of reach measurement)

2.3 Contact via the contact form

When contacting us (e.g. via contact form, e-mail, telephone or via social media), the user's details are processed for the purpose of processing the contact request and its handling in accordance with Art. 6 Para. 1 lit. b) DSGVO. The user's details may be stored in a customer relationship management system ("CRM system") or comparable inquiry organization.

We process incoming inquiries exclusively for the purpose of answering them and delete incoming inquiries as soon as their further processing is no longer necessary, but at the latest after a period of 2 years. This period begins with the receipt of the corresponding inquiry on our servers. This deletion period does not apply if the inquirer is an existing customer or if an inquirer becomes an existing customer within the above-mentioned deletion period of 2 years.

2.4 Collection of access data and log files

We, or our hosting provider, on the basis of our legitimate interests as defined in Art. 6 para. 1 lit. f. DSGVO data about every access to the server on which this service is located (so-called server log files). The access data includes the name of the accessed website, file, date and time of access, transferred data volume, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited site), IP address and the requesting provider. Servers in this sense are our web, content, application and database servers that we use to operate the website.

We automatically collect the IP address (from which you access the site), files (which you access), date and time of your access in order to find and subsequently correct website errors, i.e. technical and functional deficits.

We store server log files for security reasons (e.g. to investigate abuse or fraud) for a maximum period of time and then delete them. Data whose further storage is required for evidence purposes will only be deleted after final clarification of the respective incident.

2.5 Hosting

The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services as well as technical maintenance services that we use for the purpose of operating this online offer.

In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer in accordance with Art. 6 para. 1 lit. f DSGVO in conjunction with Art. 28 DSGVO (conclusion of contract processing agreement).

2.6 Newsletter

We send newsletters only with the consent of the recipients or within the scope of a legal permission. If the contents of a newsletter are described in detail in the context of a registration to receive a newsletter, these are decisive for the consent of the recipients. Furthermore, our newsletters contain information about our services and/or us.

The registration to receive our newsletters takes place in a so-called double opt-in procedure, i.e. after registration you will receive an e-mail in which we ask you to confirm your registration. This confirmation is necessary to make sure that nobody can register with foreign e-mail addresses. The registrations to receive our newsletter are logged in order to be able to prove the registration process in accordance with the law. This includes the storage of the registration and confirmation time and the IP address. Changes to your data stored with the shipping service provider are also logged. To register to receive our newsletter, all you need to do is enter your e-mail address. Optionally, you can enter a name in the registration process, e.g. for personal contact in the newsletter.

The dispatch of our newsletters and the associated measurement of success is based on the consent of the recipients in accordance with Art. 6 para. 1 lit. a, Art. 7 DSGVO in conjunction with § 7 para. 2 No. 3 UWG or on the basis of the legal permission in accordance with § 7 para. 3 UWG. The logging of the registration procedure is based on our legitimate interests according to art. 6 para. 1 lit. f DSGVO. We are interested in the use of a user-friendly and secure newsletter system that serves our business interests, meets the expectations of the users and enables us to provide proof of given consent.

You are entitled at any time to revoke your consent to receive our newsletter in the future. For this purpose, a clickable, so-called "unsubscribe" or revocation button is available at the end of every newsletter you receive. We are entitled to store e-mail addresses for up to three years after revocation to receive our newsletters based on our legitimate interests before we finally delete them. This storage enables us to prove a previously given consent. The further processing of this data will be carried out exclusively for the purpose of defending against possible claims based on an allegedly not granted consent or not granted to a sufficient extent or in a sufficient manner. Immediate deletion is possible if the previously given consent is confirmed at the same time as the corresponding application.

Newsletter - Measurement of success

The newsletters contain a so-called "web-beacon", i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a mailing service provider, from their server. Within the scope of this retrieval, technical information such as information on the browser and your system, as well as your IP address and time of retrieval are initially collected.

This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined by means of the IP address) or the access times. Statistical surveys also include determining whether newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of the mailing service provider, if used, to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

2.7 Cookies, pixels and right of objection for direct advertising

Cookies" are small files that are stored on the user's computer. Different information can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after his visit to an online service. Temporary cookies, or "session cookies" or "transient cookies", are cookies that are deleted after a user leaves an online offer and closes his browser. In such a cookie, for example, the contents of a shopping cart in an online store or a login jam can be stored. Cookies are described as "permanent" or "persistent" if they remain stored even after the browser is closed. For example, the login status can be saved if users visit the site after several days. Likewise, the interests of the users can be stored in such a cookie, which is used for range measurement or marketing purposes. Third-party cookies are cookies that are offered by providers other than the person responsible for operating the online service (otherwise, if it is only their cookies, it is called "first-party cookies").

We may use temporary and permanent cookies and provide information on this in our privacy policy.

If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional limitations of this online offer.

A general objection to the use of cookies used for online marketing purposes can be declared for many of the services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that in this case not all functions of this online offer can be used.

We use so-called pixels, web beacons, clear GIFs or similar mechanisms (hereinafter referred to as "pixels"). A pixel is an image file or a link to an image file that is inserted in the web page code but is not located on your terminal device (e.g. computer, smartphone, etc.). We use pixels mainly for the same reasons as cookies. They enable us, for example, to count the number of users who visit our website or, if the user's e-mail program allows HTML, to determine whether and when an e-mail was opened. Pixels help us to monitor and optimize the effectiveness of our website and advertising measures. A personal reference is not established when we use pixels. Also a person-related tracking does not take place. Usually pixels work in connection with cookies. If you have deactivated cookies, then the pixel merely identifies an anonymous website visit.

2.8 Data transfer to third parties, data transfer to third countries

Unless otherwise stated in this privacy policy, data will not be passed on to third parties.

The transfer of personal data to a country or an international organization outside the EU or the EEA is subject to legal or contractual permissions and exclusively in accordance with the requirements of Art. 44 ff. DSGVO, i.e. that an adequacy finding by the EU Commission under Art. 45 DSGVO has been made for the transfer for the country in question, that suitable guarantees for data protection exist under Art. 46 DSGVO, that binding internal data protection regulations exist under Art. 47 DSGVO.

3 Legal basis for data processing

The legal basis for obtaining consent is Art. 6 Par. 1 lit. a and Art. 7 DSGVO, the legal basis for processing for the purpose of fulfilling our services and implementing contractual measures and answering inquiries is Art. 6 Par. 1 lit. b DSGVO, the legal basis for processing for the purpose of fulfilling our legal obligations is Art. 6 Par. 1 lit. c DSGVO, and the legal basis for processing for the purpose of safeguarding our legitimate interests is Art. 6 Par. 1 lit. f DSGVO. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d DSGVO serves as the legal basis.

In addition, the other legal bases expressly mentioned in this data protection declaration apply.

If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transfer it to them or otherwise grant them access to the data, this will only take place on the basis of a legal authorization (e.g. if a transfer of the data to third parties, such as payment service providers, is necessary for the performance of the contract in accordance with Art. 6 para. 1 lit. b DSGVO), if you have consented, if a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).

If we commission third parties to process data on the basis of a so-called contract processing agreement, this is done on the basis of Art. 28 DSGVO.

4 Online presences in social media networks and platforms, integration of third party content and services

We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.

Unless otherwise stated in our privacy policy, we process the data of users if they communicate with us within the social networks and platforms, e.g. write articles on our online presences or send us messages.

We set within our online offer on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 paragraph 1 lit. f. DSGVO), we use content or service offers from third parties in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content").

This always presupposes that the third-party providers of such content are aware of the IP address of the users, as without the IP address they would not be able to send the content to their browsers. The IP address is therefore necessary for the display of this content. We make every effort to use only such content whose respective providers use the IP address only to deliver the content. Third party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain technical information about the browser and operating system, referring websites, visiting times and other details about the use of our online offer, as well as being linked to such information from other sources.

4.1 YouTube

We integrate the videos of the platform "YouTube" of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy policy: https://www.google.com/policies/privacy/,

Opt-out: https://adssettings.google.com/authenticated.

4.2 Google Analytics

On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) Google Analytics, a web analysis service of Google Ireland Limited ("Google"). Google uses cookies. The information generated by the cookie about the use of the website by the user is usually transferred to a Google server in Ireland and stored there.

Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf to evaluate the use of our website by the users, to compile reports on the activities within this website and to provide us with further services related to the use of this website and the internet. The processed data can be used to create pseudonymous user profiles of the users.

We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in Ireland and shortened there.

The IP address transmitted by the user's browser is not merged with other Google data. Users may refuse the use of cookies by selecting the appropriate settings on their browser software; users may also refuse the transfer of data generated by the cookie and relating to their use of the website to Google and prevent the processing of such data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link An opt-out cookie will be set to prevent the collection of your information on future visits to this site: Disable Google Analytics.

Further information on the use of data by Google, setting and objection options, you can find in the privacy policy of Google (https://policies.google.com/technologies/ads) and in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).

The personal data of users will be deleted or anonymized after 14 months.

5 Deletion of personal data

We delete the data processed by us in accordance with articles 17 and 18 DSGVO or restrict their processing. Unless otherwise provided for in this data protection declaration, we delete the data stored with us as soon as it is no longer required for the purpose of processing and no legal obligations to retain it stand in the way of deletion. If the data is not deleted because it is required for other and legally permissible purposes, its processing is restricted, i.e. the data is blocked and not processed for other purposes. This applies in particular to data subject to retention under commercial or tax law.

German law currently provides for the following retention periods: 6 years in accordance with § 257 para. 1 HGB (commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.) and 10 years in accordance with § 147 para. 1 AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).

6 Your rights

According to Art. 7 para. 3 DSGVO you have the right to revoke given consents according to Art. 7 para. 3 DSGVO with effect for the future.

In accordance with Art. 15 DSGVO, you have the right to request confirmation as to whether or not data in question is being processed and to receive information about this data and to request further information and a copy of the data.

In accordance with art. 16 DSGVO, you have the right to request the completion of the data concerning you or the correction of incorrect data concerning you.

In accordance with Art. 17 DSGVO, you have the right to demand that data concerning you be deleted immediately, or alternatively, in accordance with Art. 18 DSGVO, to demand that the processing of the data be restricted.

In accordance with Art. 20 DSGVO, you have the right to request that the data concerning you that you have provided us with be received and to demand that it be passed on to other responsible parties.

In accordance with Art. 21 of the DSGVO, you may at any time object to the future processing of data concerning you. In particular, you may object to processing for the purposes of direct marketing.

In accordance with Art. 77 DSGVO, you have the right to lodge a complaint with the competent supervisory authority. The State Commissioner for Data Protection and Freedom of Information for Baden-Württemberg is responsible for our company. Postal address: P.O. Box 10 29 32, 70025 Stuttgart, Germany, home address: Königstraße 10a, 70173 Stuttgart, Germany, Tel.: 0711/615541-0, Fax: 0711/615541-15, E-Mail: poststelle@lfdi.bwl.de. You can also find this on the Internet at https://www.baden-wuerttemberg.datenschutz.de.

7 Contact us

You can contact us as follows for all concerns regarding data protection:

e-mail: info@awisto.de

Phone: +49 (711) 490534-0

Address:

awisto business solutions GmbH

Commissioner for data protection

Middle path 4

70499 Stuttgart

awisto business solutions GmbH, status 15.05.2018.