Privacy policy statement

1. Name and address of the data controller

The responsible persons according to the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations are:

For Infraray GmbH:
Infraray GmbH
Stromstr. 5
10555 Berlin, Germany
Tel.: +49 (0)30 – 254 690 -0
E-mail: info(at)infraray.com
Website: www.infraray.com

2. Name and address of the data protection officer

Data protection officer of the data controller:
Gerhard Smischek
Tel.: +49 (170) 234 7311
E-mail:  datenschutz(at)infraray.com

3.    Description and scope of data processing

a) Automated data collection
Each time you visit our website, our system automatically collects data and information from the computer system of the computer that called up our site. This information is temporarily stored in a so-called log file. The following information is collected and stored automatically as part of this process:

  • Information about the browser type and version used
  • The operating system of the user
  • The IP address of the user
  • Date and time of access

The log files are automatically deleted after four weeks. The aforementioned data is processed by us in order to ensure trouble-free connection to the website and a smooth user experience. In addition, processing of the collected data allows us to evaluate the system stability and security.

The legal basis for temporary data storage is provided in Art. 6 Sec. 1 lit. f GDPR. Our legitimate interest derives from the aforementioned data collection purposes. We do not use the collected data for the purpose of drawing conclusions about your person.

Our website uses cookies as well as analytics services, which are explained in sections 4 and 5.

b) Contact form and e-mail contact
A contact form is available on our website, which can be used to contact us by electronic means. When a user draws on this option, the data entered in the input screen will be transferred to us and stored. This data includes:

  • The user’s first and last name as well as the form of address
  • Company of the user
  • E-mail of the user
  • Telephone number of the user (optional)

At the time of sending the message, the following data is also automatically transmitted and stored:

  • The IP address of the user
  • Date and time of sending

Your consent to the processing of this data will be obtained during sending with reference to this privacy statement.

Alternatively, you can use the listed e-mail addresses to contact us. In this case, the user’s personal data communicated in the e-mail will be stored.

The processing of personal data collected in the contact form serves to process the contact. In the case of contact by e-mail, too, the processing of the contact constitutes our required legitimate interest.

Other personal data collected automatically during sending are used to ensure the security of our information technology systems and to prevent misuse.

The data will be processed for the purpose of contacting us in accordance with Art. 6 Sec. 1 S. 1 lit. a GDPR on the basis of your voluntary consent. The legal basis for processing data transmitted as part of sending an e-mail is provided in Art. 6 Sec. 1 lit. f GDPR.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. As regards personal data from the input screen of the contact form and those sent via e-mail, this is the case when the respective conversation with the user has been concluded. The conversation is considered concluded when the circumstances indicate that the matter in question has been clarified conclusively.

The personal data collected automatically during sending will be deleted after a period of four weeks at the latest.

c) Using our online support
Our online support (customer helpdesk, requirements, documentation, support newsletter, PTF download, working groups) is only available to licensed customers and requires a one-time registration on our website. The following data is collected as part of the registration process:

  • The user’s first and last name as well as the form of address
  • Customer number of the user
  • Company of the user
  • Corporate position of the user
  • E-mail of the user
  • Telephone number of the user (optional)
  • Country of origin of the company (optional)

At the time of registration, the following data is also automatically transferred and stored:

  • The IP address of the user
  • Date and time of registration

User registration is necessary for the provision of certain content and services on our website or for the registration for events or user groups. The data will be processed within the scope of online support in accordance with Art. 6 Sec. 1 S. 1 lit. a GDPR on the basis of your voluntary consent. If the registration serves the fulfillment of a contract of which the user is a contractual partner, Art. 6 Sec. 1 lit. b GDPR serves as an additional basis for processing of the data.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. As regards data collected during the registration process, this is the case if the registration on our website is canceled or modified. As regards data collected during the registration process for the fulfillment of a contract, this is the case when the data is no longer required to perform the contract. Even after fulfillment of the contract, it may be necessary to store personal data of the contractual partner in order to comply with contractual or legal obligations.

The personal data collected automatically during sending will be deleted after a period of four weeks at the latest.

d) Registration for our newsletter
Our website provides you with the option of subscribing to our free newsletter. Only the e-mail address is required to subscribe to the newsletter.

In addition, the following data is collected during registration:

  • The IP address of the user
  • Date and time of registration

The legal basis for processing data after your subscribing to the newsletter is the voluntary consent of the user pursuant to Art. 6 Sec. 1 lit. a GDPR.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user’s e-mail address will be deleted as soon as the user cancels their subscription. You may unsubscribe at any time by clicking a link at the bottom of each newsletter or by sending an e-mail with your unsubscribe request to unsubscribe(at)infraray.com at any time.

The additional data collected automatically during registration will be deleted after a period of four weeks at the latest.

4. Data privacy during applications and the application process

The controller collects and processes the personal data of applicants for the purpose of handling the application procedure. Processing may also be carried out electronically. This is the case, for example, if the applicant sends his or her application by e-mail.

Applicants also have the option of applying via the applicant portal. In this case, we use the “softgarden” online application tool from softgarden e-recruiting GmbH, Tauentzienstr. 14, 10789 Berlin, Germany. Applicants who use the online application tool will be redirected from our website to the softgarden website. softgarden e-recruiting GmbH processes the application data on our behalf. Click the following link to get further information on how your data entered via the applicant portal is collected, processed and stored https://betasystems.softgarden.io/de/data-security.

The data will be used exclusively for the current application process.

By registering or applying with us, you give us your consent to collect, process and store the personal data you provide and to transmit it to the departments of the relevant Beta Systems Group companies responsible for handling the application. Furthermore, you agree that we may contact you as part of the application process using the communication details provided.

If an employment contract is concluded, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with statutory provisions.

If the data controller does not conclude an employment contract with the applicant, the data will be stored for two months after completion of the application process and deleted after the expiration of these two months, provided that no other legitimate interests as set out in Art. 6 Sec. 1 lit. f GDPR conflict with the deletion. Other legitimate interests according to this provision include, for example, the duty to provide evidence in proceedings under the General Act on Equal Treatment (AGG).

The basis for data processing is provided in Art. 6 Sec. 1 lit. a and b. GDPR.

5. Use of cookies

Our website uses cookies. Cookies are text files that are stored in the Internet browser or on the user’s computer system by the Internet browser. When a user accesses a website, a cookie may be stored on the user’s system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the user visits the website again.

On our website we use cookies that allow us to analyze the users’ surfing behavior.

In this way, the following data may be transmitted:

  • Entered search terms
  • Frequency of page views
  • Use of website functions

The user data collected in this way is pseudonymized by technical means. Therefore, it is not possible to match the data with the calling user. The data is not stored together with other personal user data.

When accessing our website, an info banner informs users about the use of cookies and refers to this privacy policy. Information on browser settings that prevent cookies from being stored is provided at the end of this section.

The legal basis for processing personal data using cookies is provided in Art. 6 Sec. 1 lit. f GDPR.

The analysis cookies are used for the purpose of improving the quality of our website and its content. Analysis cookies help us learn how the website is being used, and these insights allow us to constantly optimize our site. These purposes also represent our legitimate interest in the processing of personal data pursuant to Art. 6 Sec. 1 lit. f GDPR.

Cookies are stored on the user’s computer and transmitted from it to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been saved can be deleted at any time. This process can also be automated. If you disable cookies for our website, you may no longer be able to use all functions of the website to their full extent.

6. Use of tracking tools

a) Google Analytics
This website draws on Google Analytics, a web analysis service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics uses so-called cookies, i.e. text files stored on your computer to help us analyze how you use our website. The information the cookie generates about how you utilize this website is generally transferred and stored to a server operated by Google in the USA.

We use Google Analytics exclusively with IP anonymization enabled. This means that your IP address will be abbreviated by Google within a member state of the European Union or other countries which are contracting parties to the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be transferred to a server operated by Google in the USA and abbreviated there. Google will utilize this information on behalf of the operator of this website to analyze how you use this website. Based on the findings, Google will compile reports on website activities and will provide additional services relating to the use of this website and the Internet for the operator of the website. These purposes also represent our legitimate interest in data processing.

The data sent by us and linked to cookies, user information (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data whose retention period has expired is deleted automatically. For more information on terms of use and data privacy, please refer to https://support.google.com/analytics/answer/6004245?hl=de

The IP address that is transferred from your browser as part of the Google Analytics service will not be combined with other Google data. You can prevent cookies from being stored on your computer by making the corresponding settings in your browser; however, please note that this may limit or block some functions of this website. Furthermore, you can prevent Google from collecting and processing the data generated by these cookies about your website utilization (incl. your IP address) by downloading and installing the browser plugin available at this link: tools.google.com/dlpage/gaoptout.

As an alternative to the browser add-on or for browsers on mobile devices, please click this link to prevent the collection by Google Analytics within this website from this point onward: Disable Google Analytics (the opt-out only works in the corresponding browser and only for this domain). This will cause an opt-out cookie to be stored on your mobile device. If you delete your cookies in this browser, you must click the link again.

b) WiredMinds
Our website uses the counting pixel technology of WiredMinds GmbH(wiredminds.de) to analyze visitor behavior.

In the process, data may be collected, processed and stored for the purpose of creating usage profiles under a pseudonym. To the extent possible and feasible, these usage profiles will be completely anonymized. Cookies may be used in the process. Cookies are small text files that are stored in the visitor’s Internet browser to recognize the Internet browser when users return to the site. The data collected, which may include personal data, is transmitted to WiredMinds or collected directly by WiredMinds. WiredMinds may use information generated when users visit web pages to create anonymized usage profiles. The data obtained in this way will not be used to personally identify the visitor to this website without the additional, explicit consent of the person concerned, and the data will not be merged with personal data about the bearer of the pseudonym. If IP addresses are recorded, they are immediately anonymized by deleting the last number block.

You can object to data collection, processing and storage at any time with effect for the future under the following link: Exclude from website tracking

c) Legal basis for data processing
The use of the aforementioned tracking tools is based on the legal provisions of Art. 6 Sec. 1 lit. f GDPR (legitimate interest). Our interest pursuant to Art. 6 Sec. 1 lit. f GDPR (legitimate interest) is the continuous optimization of our online offer and our website.

7. Social plug-ins

We do not use links to social networks that already contain the code of the respective external network on our pages, so-called “social plug-ins”. We only provide simple links added by us, so no data is passed on to external site operators while you are on our site.

8. Retention period and data deletion

The personal data of the data subject is deleted or blocked as soon as the retention purpose ceases to apply. Above and beyond this, data retention may take place if this has been provided for by the European or national legislator in regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a retention period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or fulfillment of a contract.

9. Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below. We will only disclose your personal data to third parties if:

  1. a) you have given your express consent to this in accordance with Art. 6 Sec. 1 S. 1 lit. a GDPR,
  2. b) the disclosure is necessary for the assertion, exercise or defense of legal claims pursuant to Art. 6 Sec. 1 S. 1 lit. f GDPR and there is no reason to assume that you have an overriding and legitimate interest in the non-disclosure of your data,
  3. c) a legal obligation exists for disclosure pursuant to Art. 6 Sec. 1 S. 1 lit. c GDPR, as well as
  4. d) this is legally permissible and necessary according to Art. 6 Sec. 1 S. 1 lit. b GDPR for the processing of contractual relationships with you.

10. Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is being carried out on the basis of Art. 6 Sec. 1 lit. e or f GDPR; this also applies to profiling based on these provisions unless we can demonstrate that there are compelling legitimate grounds for the processing which, exceptionally, override your interests, rights and freedoms; as regards processing for the purposes of direct marketing, you may object at any time.

11. Rights of the data subject

If your personal data is processed, you are considered a data subject within the scope of the GDPR and you have the following rights vis-à-vis the data controller:

a)    Right to information
You have the right to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on the details.

b) Right to rectification
You have the right to have incorrect or incomplete personal data stored by us corrected without delay.

c) Right to deletion
You can request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

d) Right to restriction of processing
You have the right to request the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you object to our deleting the data, even if we no longer need it, because you require it to assert, exercise or defend legal claims, or if you have filed an objection to the processing pursuant to Art. 21 GDPR.

e) Right to information
If you have asserted the right to rectification, deletion or restriction of processing against the data controller, the controller is obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed about these recipients by the data controller.

f) Right to data portability
You have the right to receive a copy of your personal data provided to us in a structured, current and machine-readable format or to request the transmission to another controller.

g) Right to revocation of the declaration of consent under data protection law
You can revoke your consent towards us at any time. As a result, we may no longer continue data processing based on this consent from that point onward. h) Right to file a complaint with a supervisory authority You have the right to lodge a complaint with a supervisory authority in the Member State of your residence, workplace or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR.

12. Updates

We reserve the right to update this privacy policy from time to time. Updates to this privacy policy will be posted on our website. Changes become valid upon their publication on our website.

Last changed: May 2019