Privacy

Data protection information according to Art. 13 and 21 GDPR for the website of shopware AG

1. General

We, the shopware AG, take the protection of your personal data and the legal obligations that serve to ensure this protection very seriously. The legal provisions require comprehensive transparency in all issues regarding the processing of personal data. Only when the processing is traceable for you as the person concerned (data subject), you can be deemed to be sufficiently informed about the intention, purpose and scope of the processing. That is why our Privacy Policy explains to you in detail which so-called personal data we process when you use the website www.shopware.com or any other Webpages that refer to it (see definitions below 2.).

“Controller” in terms of the General Data Protection Regulation (GDPR), the Bundesdatenschutzgesetz – German Federal Data Protection Act (BDSG) as well as other data protection regulations is:

shopware AG
Ebbinghoff 10, 48624 Schöppingen
+49 (0) 2555 92885-0
info@shopware.com
www.shopware.com

referred to hereinafter as “controller” or “we”.

The responsible data protection officer is:
Rechtsanwalt Sascha Kremer
Rommerskirchener Straße 21
50259 Pulheim

Please be aware that you may be redirected to other webpages via links on our website which other pages are not operated by us but by third parties. We either clearly mark such links or you can recognise them by the change of the URL in your browser. We are not responsible for compliance with the applicable data protection regulations and secure handling of your personal data by third parties operating such other webpages.

2. Definitions

2.1. According to the GDPR

This Privacy Policy uses the terms used in the wording of the GPPR. The definitions (Art. 4 GDPR) are available for instance at https://dejure.org/gesetze/DSGVO/4.html.

2.2. Cookies

Cookies are small units of information which a website places on your terminal or which are read there. This serves the purpose of being able to use this information again at a later point in time. They contain letter- and number combinations to, for instance when a connection is again established with the website that places the cookies, facilitate the recognition of the user and his settings, to enable you to stay logged into a customer account or to conduct statistical analyses of a certain user behaviour.

3. General information about data processing

We only process personal data to the extent permitted by law. Disclosure or transfer to third parties takes place only in the cases described below (see sec. 4 below).

The personal data is deleted or protected by technical and organisational measures (e.g. pseudonymisation, encryption) as soon as the data processing purpose ceases to exist. This is also the case as soon as a prescribed storage period expires unless continued storage of the personal data is necessary for the purpose of conclusion or performance of a contract.

Unless we are obliged by law to ensure extended storage or disclose or transfer personal data to third parties (including but not limited to criminal prosecution authorities), the decision which personal data is collected by us, how long it is stored and to which extent you may be required to disclose your data depends on which functions and features of the website you use in particular cases.

4. Data processing in connection with the use of the website

The use of the website and its functions and features regularly requires the processing of certain personal data.

4.1. Use of the website for information purposes

When you access our website and use it for mere information purposes, e.g. without using additional functions or features such as contact forms or social media plugins, we automatically collect personal data. We thereby collect the following information: IP address of your terminal device, the date and time when the website was accessed, the name of the requested file, the amount of data transferred and the requesting provider. This information is transferred by your browser unless you have configured it in such a way that the information transfer is prevented.

The personal data is processed for purposes of functionality and optimisation of the website and to ensure the security of our information technology systems. This is at the same time our legitimate interest which renders the processing permissible according to Art. 6 subs. 1 f) GDPR.

The personal data is stored for a period of 4 weeks. We do not combine the personal data with other data sources. The data is only disclosed or transferred to third parties if and to the extent this is necessary for operating our website. For such purpose, the personal data is transferred to our Hostprovider. It is not intended to transfer personal data to a third country or an international organisation.

4.2. Google CDN (Content Delivery Network)

We use the JavaScript libraries Ajax and jQuery on our website to enable a modern design of our website. To increase the loading speed of our website, we use the Google CDN, which loads these JavaScript libraries. If you have already downloaded these JavaScript libraries from other websites via Google CDN, your browser will only access a cached copy. If your browser does not have such a copy cached, the JavaScript libraries will be loaded via our Google CDN. This establishes a connection to the Google server, whereby your IP address is transmitted to Google.

Google CDN is used for the purposes of modern design and optimisation of the loading speeds of our website. This constitutes a legitimate interest within the meaning of Art. 6 subs. 1 f) GDPR. Data transmission to the USA is in accordance with the EU Commission's implementing decision (EU) 2016/1250 (EU-US data protection shield).

Your IP address is collected by us to enable transmission to Google. You can find Google's data protection statement at https://www.google.com/policies/privacy/.

4.3. Twitter

When you access our website, a plug-in is loaded to enable customized website design and easier networking which includes a so-called “Share” button. This button is made available by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“Twitter”). When you access our website, your browser loads the Twitter code required for this. For such purpose, the browser you use must establish a connection to the Twitter servers. Twitter thereby becomes aware that our website was accessed from your IP address. At the same time, Twitter can place cookies on your terminal unless you have forbidden the use of cookies in your browser settings, or Twitter can read cookies.

We use the Twitter plug-in to provide customized website design and to enable you to quickly display or comment individual parts of our website in your Twitter account. This is a legitimate interest in terms of Art. 6 subs. 1 f) GDPR.

We collect your IP address to enable data transfer to Twitter. You are not obliged to provide this personal data; however, if you do not provide this data, you will not be able to use the plug-in.

If you do not want Twitter to allocate the personal data collected via our website to your Twitter account, you must log out from Twitter before you visit our website. The Twitter Privacy Policy is available at https://twitter.com/privacy/.

4.4. YouTube

Parts of our website use the services provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”) to display video contents. When you access the relevant pages, your browser loads the YouTube code required for displaying the video. For such purpose, the browser you use must establish a connection to the YouTube servers. YouTube thereby becomes aware that our website was accessed from your IP address. At the same time, YouTube can place cookies on your terminal unless you have forbidden the use of cookies in your browser settings, or YouTube can read cookies.

We use the YouTube plug-in to ensure an appealing design of our website and enable the display of video contents. This is a legitimate interest in terms of Art. 6 subs. 1 f) GDPR. Data transfer to the USA is made in accordance with the EU Commission Implementing Decision (EU) 2016/1250 (EU-U.S. Privacy Shield).

We collect your IP address to enable data transfer to YouTube. You are not obliged to provide this personal data; however, if you do not provide this data, you will not be able to use certain parts of our website.

If you do not want YouTube to allocate the personal data collected via our website to your YouTube account, you must log out from YouTube before you visit our website. Further information about YouTube is available at https://www.youtube.com/intl/de/yt/about/. The YouTube Privacy Policy is included in the Google Privacy Policy which is available at https://www.google.com/policies/privacy/.

4.5. Google Analytics

When you access our website, the web analysis service Google Analytics is loaded to enable statistical analysis of how the website is used. This service is provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies that enable an analysis of the use of this website. By using the website, cookies generate information that is transferred to Google in the USA and stored there. We use the supplementary feature “anonymizeIp()” to make sure that Google Analytics can only transfer a shortened form of your IP address to Google in the USA. You can prohibit the use of cookies, which are stored on your terminal device and enable an analysis of your use of the website.

We use Google Analytics for the purposes of economic optimisation and to tailor our website to suit the customers’ demands. This is a legitimate interest in terms of Art. 6 subs. 1 f) GDPR. In addition, we have concluded a contract with Google for data processing on behalf and we fully implement and comply with the strict requirements of the German data protection authorities when we use Google Analytics. Data transfer to the USA is made in accordance with the EU Commission Implementing Decision (EU) 2016/1250 (EU-U.S. Privacy Shield).

We collect your IP address to enable the shortening and subsequent data transfer to Google in the USA. You are not obliged to provide this personal data; however, if you do not provide this data, you will not be able to use our website. You can prevent the provision of this personal data by installing the AddOn under https://tools.google.com/dlpage/gaoptout?hl=de

Further information about Google Analytics is available at http://www.google.com/intl/de_ALL/analytics. The Google Privacy Policy is available at https://www.google.com/policies/privacy/.

4.6. Etracker

We use the analysis tool etracker Analytics to create usage profiles by using pseudonyms. This service is offered by etracker GmbH (Erste Brunnenstraße 1, 20459 Hamburg). Etracker Analytics uses cookies that are stored on your terminal device, unless you have prohibited the use of cookies in your browser and which enable an analysis of your use of the website.

The use of etracker Analytics is used to analyse visitor behaviour and is used to optimize our website economically and to design it in line with requirements. This constitutes a legitimate interest within the meaning of Art. 6 subs. 1 f) GDPR.

If you do not want etracker Analytics to store data about your use of our website, you can object to its use. For this purpose, Etracker Analytics offers a solution with which you can make an opt-out declaration with a single click and thus prevent being covered by analyses by etracker Analytics in the future. By using the opt-out link at http://www.etracker.de/privacy?et=jLs, a cookie is set for exclusion from the etracker analytics tool.

4.7. Google Adwords Conversion Tracking

We use "Google AdWords Conversion Tracking" for statistical recording of marketing campaigns. This service is provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA ("Google").

Google AdWords sets a cookie on your computer if you have accessed our website via a Google ad. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of the AdWords customer's website and the cookie has not yet expired, Google and we as the website administrator can recognize that the user has clicked on the ad and has been redirected to this page. Each AdWords customer receives a different cookie. Cookies cannot be tracked through the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they will not receive any information that personally identifies users.

Google Conversion Tracking is used for the purposes of economic optimisation, the demand-oriented design of our website and the correct billing of advertising campaigns carried out by us. This constitutes a legitimate interest within the meaning of Art. 6 subs. 1 f) GDPR. The data transmission to Google in the USA is in accordance with the EU Commission's implementing decision (EU) 2016/1250 (EU-US data protection shield).

If you do not wish to participate in the tracking process, you can also reject the setting of a cookie required for this - for example by using a browser setting that generally deactivates the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the "www.googleadservices.com" domain. Google's privacy policy for conversion tracking can be found here (https://services.google.com/sitestats/de.html).

4.8. Google Analytics Remarketing

Google Remarketing services are integrated in our website. The service is provided by Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. This technology enables users who have already visited this website to be addressed again through targeted advertising on the pages of the Google Partner Network. The integration of Google Remarketing thus allows us to create user-related advertising and to display interest-relevant advertising to the Internet user.

Google Remarketing places a cookie on the visitor's end device. By setting the cookies, Google will be able to recognize the visitor to this website when he or she subsequently visits websites that are also members of the Google advertising network. Whenever a website is called up on which Google Remarketing's service is integrated, the person's Internet browser automatically identifies itself with Google. As part of this technical procedure, Google obtains knowledge of personal data, such as the IP address or the user's surfing behaviour, which Google uses, among other things, to display advertisements relevant to interest.

The cookie is used to store personal information, such as the Internet pages visited by the person concerned. Personal data, including the IP address of the Internet connection used by the person concerned, is therefore transferred to Google in the USA each time the website is visited and stored there.

This personal data is processed for optimising our offers and individualised advertising. This is also where our legitimate interests lie, which is why processing in accordance with Art. 6 subs. 1 f) GDPR is permissible. The data transfer to Google in the USA takes place in accordance with the EU Commission's implementing decision (EU) 2016/1250 (EU-US data protection shield).

If you do not want to participate in the tracking process, you can also refuse the setting of a necessary cookie - for example with a browser setting that generally deactivates the automatic setting of cookies. Further information and Google's current privacy policy can be found at https://www.google.com/policies/privacy/.

4.9. Contact form / Email contact

If you use the contact forms (e.g. for easy contact, to become a partner, to get a support overview, to contact Enterprise or to request a Shopware demo) on our website or write us an e-mail, we will process the personal data you provide there. This information is transmitted by your browser or e-mail client and stored in our information technology systems. The processing of this personal data is necessary for answering your request. In addition, your IP address and the date and time of the contact request are stored when you write us an e-mail.

The date processing serves the purpose of answering your inquiry and to prevent misuse of the contact form and to guarantee the security of our information technology systems.

These processing operations are legal because the reply to your request and the protection of our information technology systems represent legitimate interests within the meaning of Art. 6 subs. 1 f) GDPR.

The personal data will be stored for as long as it is necessary to answer your enquiry. Should your enquiry lead to a later conclusion of the contract, it will be stored as long as this is necessary to carry out pre-contractual measures or to fulfil the contract. Thereafter, the personal data is routinely deleted. We do not combine this personal data with other data sources. Data will not be passed on to third parties. A transfer to a third country or to an international organisation is not intended. You are not obliged to provide this personal data, but it is not possible to use the contact forms or send an e-mail without providing it.

4.10. Setting up and using your personal Shopware account and forum account

You can create your personal Shopware account on our website (account.shopware.com) or register in our forum. If you do so, your browser will transfer the personal data which you enter there to us and we store it in our information technology systems. In addition, we store your IP address and the time of registration. When you log in to your personal Shopware- account or your forum account, our website places cookies on your terminal to enable you to stay logged in even if you have to load the website anew in the meantime.

The processing of the personal data you have entered serves to allocate future usage activities such as order placing or contact inquiries or blog posts to your customer account. These processing activities are lawful because you have consented to the processing according to Art. 6 subs. 1 a) GDPR. Moreover, the opening of a personal Shopware- account is a prerequisite for placing orders in our online shop, the processing is also necessary for the performance of the contract according to Art. 6 subs. 1 b) GDPR. It is necessary to store your IP address and the time of registration to ensure the security of our information technology systems. This is at the same time our legitimate interest which renders the processing permissible according to Art. 6 subs. 1 f) GDPR

The personal data you enter will be stored until your personal Shopware account or your forum account with us is terminated, but in any case as long as necessary to fulfil the contract. The cookies lose their validity when you log out, otherwise after 28 days at the latest. We do not combine this personal data with other data sources. Data will only be passed on to third parties if this is necessary for the operation of our online shop. A transfer to a third country or to an international organisation is not intended. You are not obliged to provide this personal data, however, the establishment or use of the personal Shopware account and the forum account "and thus an order in our online shop and use of our blog, is not possible without the provision.

4.11. Online shop (store.shopware.com)

Our website includes an online shop. When you add products to your shopping cart, our website places cookies on your terminal to enable you to continue the ordering process even if you have to load the website anew in the meantime. When you place an order, your browser also transfers to us the personal data which you have entered in the order form and which are then stored in our information technology systems. Your IP address and the time of your order will be stored, too.

The processing of the personal data entered by you serves the purpose of an order to be able to carry out. These processing activities are lawful because they are necessary for the performance of the contract according to Art. 6 subs. 1 b) GDPR. The storage of your IP address and the time of your order serves to ensure the security of our information technology systems. This is at the same time our legitimate interest which renders the processing permissible according to Art. 6 subs. 1 f) GDPR.

The personal data you enter will be stored for as long as necessary to fulfil the contract. We do not merge this personal data with other data sources. Data is only passed on to third parties if this is necessary to fulfil the contract (e.g. to payment service providers, IT service providers, mail order companies). A transfer to a third country or to an international organisation is not intended. You are not obliged to provide this personal data, however, an order in our online shop is not possible without the provision.

4.12. Subscription to a newsletter

You can subscribe to our newsletter on our website. If you do this, the personal data you provide during registration will be transmitted to us through your browser and stored in our information technology systems. Your IP address and the time of registration will be stored, too.

The processing of the data which you have entered is used to send the newsletter. These processing activities are lawful because you have consented to them according to Art. 6 subs. 1 a) GDPR. The storage of the IP address and the time of registration serves as proof of your consent, to which we are obliged pursuant to Art. 6 subs.1 c) GDPR.

We will store the personal data you have entered until you unsubscribe. We do not combine this personal data with other data sources. We do not disclose or transfer the data to third parties. It is not intended to transfer the data to a third country or an international organisation. You are not obliged to provide this personal data; however, if you do not provide this data, you cannot subscribe to our newsletter.

4.13. Request for advertising material (e.g. free whitepapers)

On our website, you can request the supply of advertising material. If you do so, your browser will transfer to us the personal data you have entered in your request and we will then store this data in our information technology systems. Your IP address and the time of your request will be stored, too.

The processing of the personal data which you have entered serves to send you the requested advertising material. These processing activities are lawful because the processing is necessary for taking steps prior to entering into a contract according to Art. 6 subs. 1 b) GDPR, and answering your request is a legitimate interest for us according to Art. 6 subs. 1 f) GDPR. The storage of your IP address and the time of your request serves to ensure the security of our information technology systems. This is at the same time our legitimate interest which renders the processing permissible according to Art. 6 subs. 1 f) GDPR.

The personal data which you have provided to us will be stored as long as this is necessary for sending you the advertising material resp. for preparing the offer/quotation or, if a contract should be concluded subsequently, for performing the contract. The data is then routinely deleted. We do not combine this personal data with other data sources. The data is only transferred to third parties if and to the extent this is required for the performance of the contract (e.g. to Carrier). It is not intended to transfer the data to a third country or an international organisation. You are not obliged to provide this personal data; however, if you do not provide this data, we cannot supply you with advertising material or prepare an offer/quotation for you.

4.14. Registration for our Shopware User Group meetings

You can register on our website for the Shopware User Group meetings we offer. If you do this, the personal data you provide during registration will be transmitted to us through your browser and stored in our information technology systems. We also store your IP address and the time of registration.

The processing of the personal data entered by you serves the purpose of preparing and conducting the Shopware User Group meeting in which you would like to regularly participate. This processing is legal because it is necessary for the performance of the contract in accordance with Art. 6 subs. 1 b) GDPR. The storage of IP address and time of registration serves the purpose of ensuring the security of our information technology systems. This is also in our legitimate interest, which is why processing is permissible under Art. 6 subs. 1 f) GDPR.

The personal data provided by you will be stored until you refrain from participating regularly in the Shopware User Group meeting and inform us of this. We do not combine this personal data with other data sources. A data transfer only takes place, as far as this is necessary for the execution of the Shopware User Group meeting (e.g. to cooperation partners, who provide the premises). A transfer to a third country or to an international organisation is not intended. You are not obliged to provide this personal data, but participation in the Shopware User Group meetings is not possible without the provision.

4.15. Application form

You have the possibility to send us an application online via our application form. In the course of your online application, personal data will be collected and processed by us for the purpose of carrying out the application procedure. Only the data relating to your application that you provide to us will be stored (in particular master data; communication data; if you also provide us with: certificates, additional qualifications, CV, desired salary, earliest possible starting date, any messages and content relating to documents uploaded by you). As soon as the form is sent, the information will be forwarded to us. If you expressly consent to this, the data will also be processed for consideration in future application procedures with us or our subsidiaries that match your application.

The legal basis for the application procedure is Art. 88 subs. 1 GDPR in connection with § 26 subs. 1 s. 1 BDSG, for applications to subsidiaries and for storage for future application procedures Art. 6 subs. 1 a) GDPR in connection with Art. 7 GDPR, § 26 subs. 2 BDSG. Your data will not be passed on.

We store your data until the end of the application process. Three months later, data on unsuccessful applications will be deleted. This also applies if you revoke your consent. If you expressly consent to this, we will store your data for up to two years, after which the data will be deleted if the application was unsuccessful. This also applies if you revoke your consent. If the data is passed on to subsidiaries with your consent, the respective storage period also applies to them. Your personal data will not be transferred to a third country or an international organisation. You are not obligated to provide this personal data, but it is not possible to process your application without it.

4.16. Blog with comment feature (forum.shopware.com)

If you register in our forum, you can comment on a blog post on our website. If you do this by clicking on the button "Send comment", the personal data (name, e-mail address, Website) provided by you will be transmitted to us by your browser and stored in our information technology systems. Your IP address and the time of sending the comment will also be saved.

The processing of the personal data you have entered serves the purpose of presenting your comment on our website. Such processing constitutes a legitimate interest within the meaning of Art. 6 subs. 1 f) GDPR in order to verify the origin of the comment. The storage of the IP address and time of submission of the comment serves to guarantee the security of our information technology systems. This is also a legitimate interest under Art. 6 subs. 1 f) GDPR.

The personal data you enter will be stored for as long as it is necessary to display the comment. We do not combine this personal data with other data sources. Data will not be passed on to third parties. A transfer to a third country or to an international organisation is not intended. You are not obliged to provide this personal data, but it is not possible to make a comment without it.

4.17. Heatmaps von Hotjar

This website uses the web analysis service Hotjar of Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe Tel.: +1 (855) 464-6788).

With this tool, movements on our website can be tracked (so-called heatmaps). For example, you can see how far users scroll and which buttons users click and for which frequency. It is also possible to get feedback directly from the users of the website. This provides us with useful information to make our website even faster and more customer-friendly. The above analysis is based on our legitimate interests for optimization and marketing purposes and the design of our website in accordance with Art. 6 subs. 1 f) GDPR.

We take care to protect your personal data when using Hotjar. This way we can only see which buttons are used, or how far they are scrolled. Parts of the website in which personal data of you or third parties is displayed or entered are automatically hidden by Hotjar and are therefore at no time comprehensible.

Hotjar provides every user with the option of using a "Do Not Track Header" to prevent the use of Hotjar, so that no data about the visit of the respective website is recorded. This setting supports all common browsers in current versions. For this purpose, your browser sends a request to Hotjar to deactivate the tracking of the respective user. If you use our website with different browsers/computers, you must set up the "Do Not Track Header" for each of these browsers/computers separately.

For detailed instructions and information about your browser, please visit: https://www.hotjar.com/opt-out
For more information about Hotjar Ltd. and the Hotjar tool, please visit: https://www.hotjar.com
The privacy policy of Hotjar Ltd. can be found at: https://www.hotjar.com/privacy

4.18. LinkedIn Insight Tag

On our website we use the marketing function of the social network LinkedIn of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter "LinkedIn"), the so called LinkedIn Insight Tag. Each time you visit our website, a connection to the LinkedIn servers is established. LinkedIn is informed that you have visited our website with your IP address. LinkedIn Insight Tag enables us to analyse the success of our campaigns within LinkedIn or to identify target groups for them based on user interaction with our website. If you are registered on LinkedIn, it is possible for LinkedIn to associate your interaction with our website with your user account.

The LinkedIn Insight Tag is used for the purpose of personalizing our website. This constitutes a legitimate interest within the meaning of Art. 6 subs. 1 f) GDPR. LinkedIn is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active).

For more information, please see LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy. An opt-out option is available here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

4.19. Facebook Custom Audiences with Facebook Pixel

We use the remarketing function "Custom Audiences" of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). Custom audiences enable us to address the users of our website with targeted advertising by placing personalized and interest related Facebook ads (https://de-de.facebook.com/business/products/ads) for them when they visit Facebook. To perform this function, the Facebook Pixel remarketing tag is implemented on the website.

The Facebook Pixel establishes a direct connection to Facebook servers when you visit our website. This transfers to Facebook which of the individual pages of our website you have visited. Facebook associates this information with your personal Facebook account.

It is used for the purpose of individualised advertisement via the social network Facebook. This constitutes a legitimate interest within the meaning of Art. 6 subs 1 f) GDPR. If you do not want Facebook to directly associate the collected information with your Facebook account, you can disable the remarketing feature "Custom Audiences" in your Facebook account settings. You must be logged in on Facebook. Alternatively, you can deactivate this via hhttps://www.facebook.com/ads/website_custom_audiences/.

For more information about Facebook's collection and use of the data, your rights in this regard and ways to protect your privacy, see Facebook's privacy policy (https://www.facebook.com/about/privacy/).

4.20. Trainings with "Thinkific"

We offer various training courses on our website, which you can book for testing or for a fee. We use a training portal provided by Thinkific (Thinkific HQ, 400 - 369 Terminal Avenue, Vancouver, BC, Canada V6A 4C4) to create, deliver, market, upload videos, test and organize all content. Thinkific is a cloud-based software platform that enables companies to create, market, sell and deliver their own online training courses. This platform thus provides the training environment and offers the sales interface.

When you book our training courses, we process the following data from you: First name, last name, e-mail address, country of origin, booked training and optionally: name of your company and SW-ID (Software Identification ID). This information is transmitted by your browser and stored in our information technology systems. In addition, your IP address and the date and time of the course booking are stored.

The processing of the personal data entered by you serves the purpose of conducting the training courses in which you would like to participate. This processing is legal because it is necessary for the performance of the contract in accordance with Art. 6 subs. 1 b) GDPR. The storage of IP address and time of registration serves the purpose of ensuring the security of our information technology systems. This is also in our legitimate interest, which is why processing is permissible under Article Art. 6 subs. 1 b) GDPR.

In order to be able to use our training offer, an independent registration on the learning platform Thinkific (thinkific.com) is necessary in addition to the registration for the training on our website. Thinkific forwards the above-mentioned data to us as customers and stores them independently. To learn what information Thinkific collects from you and how Thinkific processes it, visit https://www.thinkific.com/privacy-policy/.

The personal data provided by you at the time of booking will be stored as long as this is necessary for the fulfilment of the contract. We do not combine this personal data with other data sources. Data is only passed on to Thinkific if this is necessary for the fulfilment of the contract. The data exchange then takes place for the respective fulfilment of the contract with you and is legal according to Art. 6 subs. 1 b) GDPR. The transfer to Canada complies with a level of data protection that meets European standards, which was established for Canada by the EU Commission in a formal decision (2002/2/EC).

5. Rights of data subjects

You as the person concerned (hereinafter “data subject”) are entitled to a right to information according to Art. 15 GDPR, a right to rectification according to Art. 16 GDPR, a right to erasure according to Art. 17 GDPR, a right to restriction of processing according to Art. 18 GDPR as well as a right to data portability according to Art. 20 GDPR. The right to information as well as the right to erasure are subject to the restrictions under §§ 34, 35 BDSG (German Federal Data Protection Act). In addition, you are entitled to lodge a complaint with a supervisory authority (Art. 77 GDPR in combination with § 19 BDSG).

6. Automated case-by-case decisions including profiling

No automated case-by-case decisions are taken, including profiling.

7. Controller’s duty to inform

We will inform all recipients to whom your personal data was disclosed of any rectification or erasure of your personal data or any restriction of processing according to Art. 16, Art. 17 subs. 1 and Art. 18 GDPR unless it is impossible or requires unreasonable effort to inform them.

We will also inform you about the identity of the recipients at your request.

8. Right to oppose

You are entitled for reasons arising from your specific situation to oppose at any time the processing of your personal data which is carried out according to Art. 6 subs. 1 e) or f) GDPR. Where personal data is processed for the purpose of direct marketing, you are entitled at any time to oppose the processing of your personal data for such direct marketing purposes. The objection can be made form-free and is to be addressed to:

shopware AG
Ebbinghoff 10, 48624 Schöppingen
info@shopware.com

9. Right to withdraw your consent to personal data processing

You are entitled under Art. 7 subs. 3 sentence 4 GDPR at any time to withdraw your consent. However, the withdrawal will leave the lawfulness of the processing that has taken place with your consent before the withdrawal unimpaired. Thus, the withdrawal only takes effect for the processing intended for the time after the withdrawal. The withdrawal can be made informally, by posted letter or email. If you oppose the processing, we will no longer process your personal data unless this is permitted by another (legal) basis. If you oppose the processing and there is no other legal basis which permits continued processing, we are obliged under Art. 17 subs. 2 b) GDPR to erase your personal data without undue delay (“unverzüglich”) upon your request.
The withdrawal can be made informally and is to be addressed to:

shopware AG
Ebbinghoff 10, 48624 Schöppingen
info@shopware.com