Data Privacy
1 Introduction
The following information is intended to inform you about processing of your personal data by AppliqX, what personal data we collect, how we use it, with whom we share it, what rights you have and how you can contact us. We are committed to protecting your personal data and the personal data of persons associated with you. All personal data processed by us is processed in accordance with applicable laws and is subject to the relevant data protection policies and procedures.
Please note that the passages relating to the General Data Protection Regulation (GDPR) only apply to EU residents and their data. Where personal data relating to individuals outside the EU is concerned, it will be processed in accordance with the same standards, unless relevant local requirements apply. In any case, you can contact us directly if you have any questions about the protection of your data.
2 Responsible entity / Data controller
AppliqX B.V.
c/o EDGE Workspaces
Fred. Roeskestraat 115
1076 EE Amsterdam
The Netherlands
AppliqX can be reached via email at hello@appliqx.com and via telephone on +49 (0) 9232 5161
Authorized representative of AppliqX is Mr. Christoph Bauer.
3 Collection and storage of personal data, type, purpose, and their utilization
We process the data of our customers, interested parties and other contractual partners (hereinafter referred to as "contractual partners") in accordance with Art. 6 para. 1 lit. b. GDPR, to provide them with our pre-contractual or contractual services as well as to accomplish our business with our contractual partners. The data processed in this connection, their type and extent as well as the purpose and the necessity of their processing, are determined by the underlying contractual relationship.
If your personal data is not provided to us, we may not be able to provide our pre-contractual or contractual services because we are not required to collect it by law or by a contract we have with you. In this case, we may have to cancel a product or service that you have used with us. Should this occur, we will inform you immediately after cancellation.
The processed data includes:
-
Your first and last name
-
A valid business email address
-
The business address
-
Telephone number (landline and / or mobile phone)
-
The lastly used IP address
-
Information that is necessary for the conclusion and provision of our contractual services
The collection of these data takes place particularly:
-
For correspondence with you
-
To initiate and conclude a contractual relationship with you, or companies named by you
-
To identify you as our customer
-
For invoicing
Additionally, we process and store personal data in the context of our administrative tasks, as well as the organization of our business, our financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process while rendering our pre-contractual and contractual services. The data processing is based on Art. 6 Abs. 1 lit. c. GDPR and Art. 6 Abs. 1 lit. f. GDPR.
Furthermore, we process and store personal data to operate our business economically, and to be able to recognize market trends, to realize market research, to carry out marketing measures and to assess the necessities of our contractual partners and users. We process contract data, usage data, inventory data, communication data as well as metadata based on Art. 6 para. 1 lit. f. GDPR, whereby the affected persons comprehend our contractual partners, interested parties, customers as well as users and visitors of our online presence.
The analyses serve to increase user-friendliness, to optimize our offer and to reach an economic business management. The analyses are of our exclusive use and will not be disclosed externally unless they are anonymous analyses with summarized values. If such analyses or profiles are personal, they will be deleted or anonymized upon termination of the users, or otherwise after two years from the conclusion of the contract. Elsewise, the overall economic analyses and general trend determinations are created anonymously wherever possible.
During the usage of our online services, we may store the IP addresses and the momentum of their respective connection. The storage is based on our legitimate interests, especially to prevent misuse and the unauthorized use of our online services. A transfer of this data to third parties does not take place unless it is necessary for the pursuit and enforcement of our claims according to Art. 6 para. 1 lit. f. GDPR or there is a legal obligation in accordance with Art. 6 para. 1 lit. c. GDPR.
In addition, we do not process any special categories of personal data, or personal data of a minor, an incompetent, or a quasi-incompetent person, unless they are part of an operation which was either contracted by our customers or was concluded through our commercial transactions.
We draw attention to the necessity of providing personal data if this is not evident for the contracting parties. The disclosure to external persons or companies only takes place in case it is necessary in the context of the initiation and conclusion of contracts to which the data subject is a party, or to take steps at the request of the data subject prior to entering a contract. When processing the data facilitated to us, we act in accordance with the instructions of the customer as well as with existing legal requirements.
The data is deleted if it is no longer necessary to fulfill contractual or legal duties or to deal with any warranty and comparable obligations, whereby the necessity of storage of the data is reviewed every two years; furthermore, the legal storage obligations apply.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
4 Transfer of personal data to third parties
According to Art. 6 para. 1 lit. b. GDPR, Art. 6 para. 1 lit. c. GDPR and Art. 6 para. 1 lit. f. GDPR we transfer company-related data, which may also include personal data, to third par-ties if this is necessary for the fulfillment of our services.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
If a transfer of personal data to the USA cannot be ruled out due to services used, we have concluded standard contractual clauses with the respective provider pursuant to Art. 46 (2) lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the European level of protection. In cases where this cannot be guaranteed even through this contract extension, we endeavor to obtain additional regulations and assurances from the recipient in the USA.
5 Contact
At the moment of getting in contact with us (for example by contact form, e-mail, telephone or via any social media channel), the information provided by the user will be processed in order to proceed with the contact request and its processing according to Art. 6 para. 1 lit. b GDPR. All user information may be stored in a Customer Relationship Management System ("CRM System") or any comparable system.
We delete the inquiries in case that they are no longer necessary. We check the necessity every two years; furthermore, the legal archiving obligations apply.
6 Hosting and E-Mailing
The hosting services used by us are for the following purposes: providing infrastructure services, computing capacity, storage volume and database services, e-mailing, security and technical maintenance services.
Here we, or our hosting provider, process inventory data, contact data, content data, usage data, users, customers, interested parties and visitors to our online offer on basis of our legitimate interests in an efficient and secure provision of our online offer according to Art. 6 para. 1 lit. f GDPR combined with Art. 28 GDPR (conclusion of an order processing contract).
7 Collection of access data and log files
We, or our hosting provider, collect based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR data in relation with every access to the server on which the online service is located (so-called server log files). Access data includes
-
IP address of the requesting computer
-
Date and time of access
-
Name and URL of the retrieved file
-
Website from which the access takes place (referrer URL)
-
The browser used and, if applicable, the operating system of your computer, as well as the name of your access provider
The mentioned data are stored for the duration of the existence of the website. The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Further storage may be realized in individual cases if required by law.
8 Online presences in social media
We may maintain online presences within social networks and platforms to communicate actively with customers, interested parties and users and to be able to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and the data processing guidelines of the respective operators apply.
Unless otherwise indicated in our data processing guidelines, we process the users' data, provided they communicate with us within social networks and platforms, e.g., send us messages.
9 Rights of affected persons
You have the right:
-
in accordance with Art. 7 para. 3 GDPR, to revoke your consent, once given to us, at any time. As a result, we are not allowed to continue the data processing based on this con-sent for the future.
-
to receive information about your personal data processed by us in accordance with Art. 15 GDPR within 30 days of your request at the latest. In particular, you may request in-formation about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned storage duration, the right of rectification, cancellation, limitation of processing or opposition, the existence of a right of appeal, the origin of your data, in case that the data was not collected by us, as well as the existence of an automated decision-making including profiling and possibly meaningful information about their details.
-
according to Art. 15 GDPR, to immediately demand the correction of incorrect or the completion of incomplete personal data stored with us.
-
to demand the deletion of your personal data stored with us, in accordance with Art. 17 GDPR, unless the processing is essential for the exercise of the right of freedom of expression and information, for the fulfillment of any legal obligation, for reasons of public interest or enforcement or for the exercise or defense of legal claims.
-
to demand the limitation of the processing of your personal data according to Art. 18 GDPR, as far as the accurateness of the data is disputed by you, the processing is illegitimate, you refuse its deletion and we no longer need the data, but you necessitate the data to exercise or defend legal claims, or you have objected to processing in accordance with Art. 21 GDPR.
-
in accordance with Art. 20 GDPR, to receive your personal data provided to us in a structured, common, and machine-readable format or to request the transfer to another person responsible for the matter on your behalf and
-
to complain to a supervisory authority in accordance with Art.77 GDPR and the authority in your jurisdiction. Generally, you can contact the supervisory authority of your usual place of residence or workplace or of our registered place of business.
10 Right of objection
If your personal data is processed because of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object against the processing of your personal data in accordance with Art. 21 GDPR, if there are reasons for doing so which arise from your specific situation. If you wish to exercise your right of objection, please contact us via the communication channels specified in section 2 above. The same applies to the objection to the collection and disclosure of your personal data.