Privacy Statement

1. Introduction and definitions

Thank you very much for your interest in our offer. The protection of your personal data is very important to us. At this point, we would like to inform you about the privacy in our company.

In the course of this privacy statement, we often use the terms "personal data" and "processing".

According to Art. 4 of the General Data Protection Regulation (GDPR) "personal data" means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

We also use the term "processor". "Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller; .

Further definitions can be found in Art. 4 GDPR.

2. Subject of data protection and controller

3. Which personal data we process and for what purpose

Insofar as personal data (eg name, address or e-mail addresses) is collected on our websites, this is always done as far as possible on a voluntary basis. In some cases, data is also processed when you visit our websites without you entering any data.

We use all personal data

only to the extent necessary for the execution of the contract
or as required by law
or for our protection against misuse of our services.

Depending on which services you use, different personal data will be processed by us. You can find out what these are here.

Data processing when visiting our websites

This website collects and stores information transmitted by your browser. Such data is also generated when accessing any other website on the Internet. these are

Visited website
Source / reference from which you came to our site
Browser type u. -version,
used operating system,
Referrer URL (the previously visited page),
the time of the server request (timestamp).
Host name of the accessing computer (IP address)

The IP address will be anonymized. The deletion takes place after 7 days.

The collection and storage is done first in order to create a statistic about the traffic on our websites and to be able to improve them, but also to detect unlawful attacks on the servers. There is no match with other data, e.g. the receipt of a message or participation in the forum.

The collection and storage is done first in order to create a statistic about the traffic on our websites and to be able to improve them, but also to detect unlawful attacks on the servers. There is no match with other data, e.g. the receipt of a message or participation in the forum. The IP address will be anonymised after 24 hours. The deletion will take place after 7 days at the latest.

Our websites uses cookies

Cookies are used to make the offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser. Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit. Cookies do not harm your computer and do not contain viruses.

You can prevent the storage of cookies. To do this, you must change the appropriate settings in the browser you are using. We point out that the deactivation of the cookies can lead to functional restrictions when visiting the site.

Data processing when using the forum / upon registration

You can read posts from the public forum on our website, but you will need to register to post. When registering on our website is the input

a name,
a username,
a password and
a valid e-mail address

required.

Your name, username and e-mail address, as well as the time of your registration and the time of your last visit (when logged in) will be stored with us.

Compose posts in the forum, will

the IP address of the computer used plus timestamp

saved by us.

The storage of this data is for the reason that we can enlighten in case of need possibly committed offenses and copyright infringements. Because if your contribution violates applicable law, we can be prosecuted for why we have an interest in the identity of the author. Furthermore, the use of the member forum is bound to a membership. Support in these forums is available to members we can only identify by user profile.

If you post in the forum, your username and forum entry will be visible to others.

You can change your data at any time via our website. You can also delete your user account. When you do this, your user account is initially suspended. The deletion of the data collected with the registration and forum use takes place within two working days. Exceptions are your authored posts and your username. These remain visible in the forum. However, we reserve the right to delete posts in the forum at any time in our sole discretion.

If a member deletes his user account, the service in the member forum is no longer available to him.

Data processing when subscribe as a member

To obtain a membership, you must complete a form. We use the information given here exclusively for the fulfillment and execution of the contract. The form requires the entry of the following data:

Your first and last name,
legal form
and address / registered office of the company,
if applicable, the valid EU VAT ID or UID (for Swiss companies),
Your contact details like e-mail address
and phone number.

This information is necessary so that we can create a legally compliant invoice and we can reach you for inquiries. In addition, you must register because the membership includes the use of the member forum, which is only available to registered members. For this the input of a user name is necessary. You must also have one

Information about your payment method (bank transfer or Paypal)

make it possible for you to be forwarded directly to Paypal, or we can tell you our Paypal account number. Further information is voluntary.

A user account can be deleted independently by a member at any time. If a member deletes his user account, the service in the member forum is no longer available to him. More information under the chapter Data processing when using the forum / at registration.

Data processing during the subscription, receipt and cancellation of the newsletter

When registering for the newsletter will

Your e-mail address and
the entered name

used for sending the newsletter until you unsubscribe from the newsletter. Without your e-mail address we can not send a newsletter.

Both when ordering the newsletter and when unsubscribing will

the IP address of the computer used plus timestamp

saved. Since it is not allowed to send a newsletter without the consent of the recipient, we need this data in order to be able to prove the registration or the cancellation of the newsletter.

We will obtain your consent to the processing of this data.

The consent to the storage of your personal data and their use for the newsletter can be revoked at any time with effect for the future. This cancellation is made by the newsletter unsubscribe on the website or the link that is offered in each newsletter. A revocation is also possible via the contact option in our imprint

If necessary, change:

In addition, a general evaluation of the opening rate of our newsletters takes place. However, we can not determine which recipient the e-mail has opened. This evaluation is necessary so that we can make our newsletter more user-friendly and effective.

Data processing using our contact form

Contact us via the contact form, so you must

Your Name
and your e-mail address

specify. This information is mandatory for us, otherwise we will not be able to respond to your requests.

Further information is voluntary.

All information will be saved so we can process your request and clarify follow-up questions.

To process the data that you send us via our contact form, we request your consent.

4. Transfer and storage of your personal data

Disclosure to third parties and processors

All personal data stored by us will not be disclosed to third parties or processors without your express consent, unless the processing is necessary to fulfill our order or to fulfill a legal obligation, for example for tax law reasons. Examples of such a transfer include, for example, a tax audit or the storage of your data with our web host (processor). We conclude a contract with contract processors, which obliges him to comply with all data protection regulations.

We may also be required to disclose your information for the purposes of enforcing, pursuing or defending legal claims.

Duration of storage of your personal data

We only store your personal data for as long as it is necessary for the performance of our duties or as required by law (statutory retention period) or if we require proof of your consent to the processing of your personal data, even if you have given your consent for have revoked the future.

For different purposes, there are different storage periods ranging from a few days to several years. Your data will be routinely checked by us and deleted after expiry of the respective period, if they are no longer required for contract fulfillment or contract initiation.

5. Legal basis on which we process personal data

In any case, the processing of your personal data is based on Article 6 of the GDPR and in accordance with the country-specific data protection provisions applicable to the Open Source Group.

With consent

Our processing is based on Art. 6 I lit. a GDPR if we obtain consent for specific purposes (such as subscribing to a newsletter or registering).

For the performance of a conract

Our processing is based on Art. 6 I lit. b GDPR, if necessary for the performance of a contract of which the data subject is a party. This is necessary, for example, if we want to email you information about our services or write you an offer or if we need to identify you as a member so that you can get support from us in the forum. These are, among other things, processing operations that require the supply of goods or other services.

If we we are legally obliged

Processing operations to which we are legally obliged (for example to fulfill tax obligations) are based on Art. 6 I lit. c GDPR.

For vital interests

If necessary, our processing of personal data is based on Art. 6 I lit. d GDPR. This is likely to be very rarely necessary when it comes to the vital interests of the person concerned or another natural person. For example, if a visitor to our premises is injured and we need to share information with a doctor.

With justified interests

Furthermore, processing operations could take place which are based on Art. 6 I lit. f GDPR are based. This may be the case if the lawfulness of the processing is justified by the legitimate interests of our company, including a controller to whom the personal data may be disclosed or a third party. However, the interests or fundamental rights and freedoms of the data subject should not prevail.

For example, there could be a legitimate interest if there is a relevant and proportionate relationship between the data subject and the controller, eg. For example, if the data subject is a customer of ours or is at our service. (Recital 47, second sentence, GDPR)

6. Protection of personal data

7. Your rights

Under GDPR, you have certain rights that we would like to clarify for you here.
Right to transparent information, communication and modalities for the exercise of your rights

You have the right to provide us with all the information required by Articles 13 and 14 GDPR and all communications pursuant to Articles 15 to 22 and 34 of the GDPR relating to processing in a precise, transparent, understandable and easily accessible form communicate clear and simple language; this applies in particular to information that is aimed specifically at children (Article 11 GDPR)

Right to information when collecting personal data

You have a right to be informed by us when we collect personal information from you. (Art. 14 GDPR), in particular to obtain the information that we provide you with in our privacy policy.

Right of access by the data subject

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data (Art. 15 GDPR).

Right to rectification

Likewise, you have the right to request a correction or completion of your personal data (Art. 16 GDPR).

Right to erasure (‘right to be forgotten’)

You have the right to demand the deletion of your personal data stored by us (Art. 17 GDPR), except if the cancellation contradicts the exercise of the right to freedom of expression and information, the processing is necessary to fulfill a legal obligation, or the processing for reasons of public interest or to assert, exercise or defend legal claims.

Exempted from the deletion are, for example, data for which there are statutory retention periods and which are subject to commercial or fiscal retention requirements. These will be deleted after expiry of the last expiry of the retention period. If deletion is not possible, the processing of your personal data may be restricted.

Right to restriction of processing

You have the right to obtain from us restriction of processing where one of the following applies:

you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;
the processing is unlawful and you oppose the erasure of the personal data and requests the restriction of their use instead;
we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;
you have objected to processing pending the verification whether our legitimate grounds override those of yours.

Right to data portability

You shall have the right to receive the personal data concerning him or her, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance by us. you also have the right to have the personal data transmitted directly from one controller to another, (Article 20 GDPR). If you require the direct transfer of data to another person in charge, this will only be done to the extent technically feasible.

Right to object

You shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1), (Art. 21 GDPR).

-

If you would like to exercise your rights, please contact the office indicated in the imprint. To prevent unauthorized access, modification or deletion of your data, it may be necessary for us to require a copy of your ID card to uniquely identify you.

-

Right to lodge a complaint with a supervisory authority

If you believe that the processing of personal data concerning you, violates data protection law, then you have the right to complain to the competent data protection supervisory authority (Art. 77 GDPR).

8. Withdrawal of consent

9. Changes to this Privacy Policy

Privacy Statement of Open Source Group GmbH