Data protection notice
Name and address of the person responsible
The responsible person in terms of the Basic Data Protection Regulation (DSGVO) and other national data protection laws of the member states as well as other data protection regulations is: aiconix.ai GmbH represented by the managing director: Eugen L. Gross Harburger Schloßstraße 6-12 21079 Hamburg E-Mail:
Telefon: +49 (40) 766293680
Name and address of the Data Protection Officer The data protection officer of the person responsible is:
The data protection officer of the person responsible is:
Thilo Noack SharedIT Professional GmbH & Co KG Seabystraße 17a
24576 Bad Bramstedt
1. Access data in server log files
Every time our website is accessed, we automatically save access data in so-called server log files. This includes the date and time of access, the amount of data transferred and, if applicable, the name of the requested file, the browser used and its version, the operating system used, IP address, requested URL including sub-pages, referrer URL (URL that you visited immediately before) and the requesting provider. Temporary storage of the IP address by the system is necessary to enable delivery of the website to your end device. For this purpose, your IP address must remain stored for the duration of the session. The legal basis for the temporary storage of your data and log files is Art. 6 para. 1 lit. f DSGVO. This data is evaluated exclusively to ensure the permanent and trouble-free operation of the website and to improve the contents of our website and for transmission to law enforcement authorities in the event of a cyber-attack and to ensure the security of our information technology systems. An evaluation of your data for marketing purposes does not take place in this context. These purposes also include our legitimate interest in data processing in accordance with Art. 6 Para. 1 letter f DSGVO. The data of the server log files are stored separately from all other personal data provided by you. The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of our website. There is therefore no possibility of objection.
3. Social plug-ins
We use various social plugins on our website. We do not collect any personal data ourselves by means of the social plug-ins or through their use. To prevent personal data from being transferred to service providers in the USA without your knowledge, we use the so-called Shariff solution. Shariff was developed for the German computer magazine c't and is published by GitHub, Inc, 88 Colin P. Kelly Junior Street, San Francisco, CA 94107, USA. This solution ensures that initially no personal data is passed on to the providers of the individual social plugins when you visit our website. Only when you click on one of the social plug-ins can data be transferred to the service provider and stored there. By clicking on the respective plugin, you consent to the data transfer to the respective service provider. The legal basis for processing your data after your consent is Art. 6 para. 1 lit. a DSGVO. The purpose of using the Shariff solution is to protect your personal data and at the same time to enable us to integrate a button solution for social networks.
A. Use of Facebook plugins
On our website we use the social plugin of the social network facebook.com, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). The person responsible for processing personal data if you live outside the USA or Canada is Facebook Ireland Ltd, 4 Grands Canal Square, Grand Canal Harbour, Dublin 2, Ireland. If you use the plugin, a direct connection to the Facebook servers is established via your browser. As part of this technical process, Facebook is informed which specific subpage of our website you are visiting. In addition, the corresponding information - e.g. the activation of the Like button - is transmitted from your browser to Facebook, linked to your user account and stored. If you are logged in with your personal Facebook account during your visit to our website, Facebook can assign the visit and the subpages of our website you actually visit to your account. If you do not wish such processing, you must log out of your Facebook account before visiting our website and delete your cookies. You can also object to the use of your data for advertising purposes in the Facebook profile settings https://www.facebook.com/set tings?tab=ads. If you are not a member of Facebook, it is still possible for Facebook to save your IP address. For further information on the purpose and scope of data collection and on the further processing and use of your data, please refer to the Facebook data policy http://www.facebook.com/poli cy.php.
B. Use of the Twitter plugin
On our website we use the plugin of the twitter.com service, which is operated by Twitter, Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA ("Twitter"). If you use the plugin, a direct connection to the Twitter servers is established via your browser. As part of this technical process, Twitter is informed about which specific subpage of our website you are visiting. In addition, the relevant information - e.g. the activation of the Twitter button - is transmitted from your browser to Twitter, linked to your user account and stored. If you are logged in with your personal Twitter account during your visit to our website, Twitter can assign the visit and the subpages of our website you actually visited to your account. If you do not wish such processing, you must log out of your Twitter account before visiting our website and delete your cookies. If you are not a member of Twitter, there is still the possibility that Twitter may save your IP address. For further information on data protection, please refer to the data policy https://twitter.com/privacy? lang=de of Twitter.
C. Use of the LinkedIn plugin
D. Use of the Xing plugin
On our website we use the plugin of the professional network xing.de, which is operated by XING AG, Dammtorstraße 30, 20354 Hamburg, Germany ("Xing"). If you use the plugin, a direct connection is established with the Xing servers via your browser. As part of this technical process, Xing obtains information about which specific subpage of our website you are visiting. In addition, the corresponding information - e.g. the activation of the share button - is transmitted from your browser to Xing, linked to your user account and stored. If you are logged in with your personal Xing account during your visit to our website, Xing can assign the visit and the sub-pages of our website you actually visited to your account. If you do not wish such processing, you must log out of your Xing account before visiting our website and delete your cookies. If you are not a member of Xing, there is still the possibility that Xing may store your IP address. Further information on data protection can be found in the Xing data protection regulations https://www.xing.com/privacy.
4. Integration of Youtube
We include on our website videos from the social network youtube.com, which is operated by YouTube, LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA ("YouTube"). YouTube LLC is a subsidiary of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043- 1351, USA. When you access our website, your browser establishes a direct connection with the YouTube servers. Your browser is automatically prompted by the video embedded in our website to download a representation of the relevant component from YouTube. As part of this technical process, YouTube is informed which specific subpage of our website you are visiting. If you use the videos, the corresponding information - e.g. the activation of the play button - is transmitted from your browser to YouTube, linked to your user account if necessary and stored. The legal basis for the use of your data is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f DSGVO lies in the optimisation and economic operation of our website. If you are logged in with your personal Google account during your visit to our website, YouTube can assign the visit and the sub-pages of our website that you actually visit to your account. If you do not have a Google Account, there is still the possibility that YouTube may save your IP address. If you do not wish such processing, you must log out of your Google Account and delete your cookies before visiting our website. You can object to the use of your data by Google at any time by clicking on the following link: https://adssettings.google.co m/authenticated For further information on data protection, please refer to the YouTube data protection regulations https://www.google.de/intl/de/ policies/privacy
5. Integration of third-party content
We sometimes integrate thirdparty content on our website, such as maps from Google Maps and Apple Maps, RSS feeds or graphics from other websites/providers. To display these contents, it is necessary to transmit your IP address to the third-party provider. When you access our website, your browser therefore establishes a direct connection with the servers of the respective third-party provider. Your browser is automatically prompted by the respective content embedded on our website to download a representation of the corresponding component of the third-party provider. As part of this technical process, the third-party provider is informed which specific subpage of our website you are visiting. The legal basis for the use of your data is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f DSGVO lies in the analysis, optimisation, and economic operation of our website. Third party providers may also use so-called "web beacons" for statistical or marketing purposes. The " web beacons " can be used to evaluate further information, such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on your terminal device and may contain technical information on the browser and operating system, referrer URL, visiting time and other details on the use of our website, as well as being linked to such information from other sources. You can object to the use of your data by Google at any time by clicking on the following link: https://adssettings.google.co m/authenticated
6. Email and contact-form
Due to legal regulations, we provide information on our website that enables rapid electronic contact with us and direct communication with us. This includes both our e-mail address and our contact form. If you contact us by e-mail or via our contact form, the personal data you provide will be stored automatically. The other personal data processed during the contact is used to prevent misuse of the contact form and to ensure the security of our information technology systems. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f DSGVO. If the purpose of the contact is the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b DSGVO. We use the personal data you provide exclusively for processing your specific enquiry. The data provided will always be treated confidentially. Your details may be stored in a customer relationship management system (socalled CRM system) or another organisation tool for customer data. The data will be deleted as soon as they are no longer required for the purpose of their collection. For personal data collected from the input mask of the contact form and those sent by e-mail, this will be the case when the respective conversation with you has ended. The conversation ends when it is clear from the circumstances that the matter in question has been conclusively clarified. If you contact us, you can object to the storage of your personal data at any time. In such a case the conversation cannot be continued.
You have the opportunity to leave comments on our website. To do so, select a user name under which the comment will be published. This user name is visible to all users of our website. You can also optionally specify a website, which is also visible to all users of our website. You must also enter your email address. By commenting on our website, you agree that we may store and process your name, the comment, your IP address, and the time the comment was sent. The legal basis for the processing of your data is Art. 6 para. 1 lit. a DSGVO, if you have given your consent. In addition, the storage of your IP address and the time of sending the comment is necessary for security reasons in case your comment violates the rights of third parties or contains illegal content. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f DSGVO. The storage of this data is therefore in our own interest, so that we can be exculpated if necessary, in the event of an infringement of the law. We do not pass on this data to third parties unless such a transfer is required by law or serves our legal defence.
8. Data processing for payment process
We use payment service providers to process services that are subject to charges. If you choose a payment method from the payment service provider Stripe, the payment will be processed by the payment service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provide during the ordering process together with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number, account login data, email address, sum of the purchase, method of payment, sometimes: date of birth, company networked with this account, browser, terminal) in accordance with Art. 6 para. 1 lit. b DSGVO (for the execution of a contract). Your data will only be passed on for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. You can find further information on data protection at Stripe under https://stripe.com/de/privacy
9. Data security
We secure our website and other systems through numerous technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons. However, despite regular checks, complete protection against all risks is not possible and cannot be guaranteed by us. For this reason, you are free at all times to transmit your personal data to us by other means, for example by telephone or post.
10. Legal basis for the processing of personal data
Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a DSGVO serves as the legal basis for the processing of personal data. Art. 6 para. 1 letter b DSGVO serves as the legal basis for the processing of personal data which is necessary for the performance of a contract to which you are a party. This also applies to processing operations which are necessary for the implementation of precontractual measures. Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis. In the event that your vital interests or the vital interests of another natural person make it necessary to process personal data, Art. 6 para. 1 lit. d DSGVO serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if your interests, fundamental rights and freedoms do not outweigh the former, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for the processing.
11. Legitimate interests in the processing
If the processing of your personal data is based on Article 6 I lit. f DS-GVO, our legitimate interest, unless otherwise stated, is the performance of our business activities. In all other respects, we have stated our purposes and interests within the framework of the above list of processing in each case.
12. Data deletion and storage duration
Your personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies, or you revoke your consent. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU ordinances, laws or other regulations to which the person responsible is subject. If the purpose of storage ceases to apply, if you revoke your consent or if a storage period prescribed by the European Directive and Regulation Giver or another competent legislator expires, the personal data will be blocked or deleted as a matter of routine and in accordance with the statutory provisions, unless it is necessary to continue storing the data for the conclusion or performance of a contract.
13. Right to information
You also have the right to receive free information from us at any time about the personal data stored about you and a copy of this information. You also have a right to information regarding the following information:
- the processing purposes,
- the categories of personal data processed,
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular to recipients in third countries or to international organisations,
- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
- the existence of a right of rectification or erasure of personal data relating to them or of a right of opposition to or limitation of the processing by the controller,
- the existence of a right of appeal to a supervisory authority,
- if the personal data are not collected from the data subject: all available information on the origin of the data and,
- the existence of automated decision making, including profiling, in accordance with Article 22(1) and (4) of the DPA and, at least in these cases, meaningful information about the logic involved and the scope and intended impact of such processing on the data subject
You also have a right of information as to whether personal data has been transferred to a third country or to an international organisation. If this is the case, you also have the right to be informed of the appropriate guarantees relating to the transfer.
14. Right of rectification
You have the right to request the immediate correction and/ or completion of incorrect or incomplete personal data concerning you. We must make the correction without delay.
15. Right to restrict processing
You have the right to request us to restrict processing if one of the following conditions is met:
- The accuracy of the personal data is contested by the data subject, for a period of time that allows the data controller to verify the accuracy of the personal data.
- The processing is unlawful, the data subject refuses to have the personal data deleted and instead requests that the use of the personal data be restricted.
- The controller no longer needs the personal data for the purposes of the processing, but the data subject needs them in order to assert, exercise or defend his rights.
- The data subject has lodged an objection to the processing in accordance with Art. 21 (1) DS-GVO and it is not yet clear whether the legitimate reasons of the controller outweigh those of the data subject.
If the processing of personal data relating to you has been restricted, such data may be processed, with the exception of storage, only with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State. If the restriction on processing has been restricted under the above conditions, you will be informed by us before the restriction is lifted.
16. Right of cancellation
You have the right to demand that the personal data concerning you be deleted immediately if one of the following reasons applies and provided that the processing is not necessary:
- The personal data has been collected or otherwise processed for purposes for which it is no longer necessary.
- The data subject withdraws his or her consent on which the processing was based under Article 6(1)(a) DSGVO or Article 9(2)(a) DS-GVO and there is no other legal basis for the processing.
- The data subject lodges an objection to the processing in accordance with Article 21 (1) DS-GVO and there are no overriding legitimate reasons for the processing or the data subject lodges an objection to the processing in accordance with Article 21 (2) DS-GVO.
- Personal data were processed unlawfully.
- The deletion of personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
- The personal data were collected in relation to information society services offered in accordance with Article 8 paragraph 1 of the DSGVO. If the personal data have been made public by us and if we, as the data controller, are obliged to delete the personal data in accordance with Art. 17 para. 1 of the DS-GVO, we will take reasonable measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers who process the published personal data that the data subject has requested these other data controllers to delete all links to these personal data or copies or replications of these personal data, unless the processing is necessary. The right of erasure shall not apply insofar as processing is necessary:
- on the exercise of the right to freedom of expression and information;
- in order to comply with a legal obligation requiring processing under Union or national law to which the controller is subject or in order to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 DSGVO;
- for archiving, scientific or historical research purposes in the public interest or for statistical purposes in accordance with Art. 89 Para. 1 DSGVO, insofar as the law referred to in section a) is likely to render impossible or seriously prejudice the attainment of the objectives of such processing, or
- to assert, exercise or defend legal claims.
17. Right to information
If you have asserted the right to rectification, deletion or limitation of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, deletion or limitation of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
18. Right to data transferability
You have the right to receive the personal data concerning you which you have provided us with in a structured, common and machinereadable format. You also have the right to have this data communicated to another controller without hindrance from us, provided that the processing is based on the consent pursuant to Art. 6 paragraph 1 letter a DSGVO or Art. 9 paragraph 2 letter a DS-GVO or on a contract pursuant to Art. 6 paragraph 1 letter b DS-GVO and the processing is carried out by means of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us. Furthermore, when exercising your right to data transfer in accordance with Art. 20 Paragraph 1 DS-GVO, you have the right to request that personal data be transferred directly from us to another responsible party, insofar as this is technically feasible and provided that this does not affect the rights and freedoms of other persons. The right to data transferability does not apply to processing of personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
19. Right of appeal
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you that is carried out on the basis of Article 6(1)(e) or (f) of the DPA. This also applies to profiling based on these provisions. In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims. If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. This also applies to profiling, insofar as it relates to such direct marketing. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes. You also have the right to object, for reasons arising from your particular situation, to the processing of your personal data which concerns you and which is carried out by us for the purposes of scientific or historical research or for statistical purposes in accordance with Article 89 paragraph 1 of the DS-GVO, unless such processing is necessary for the performance of a task carried out in the public interest. You can contact us at any time to exercise your right of objection. You are also free to exercise your right of objection in connection with the use of information society services, without prejudice to Directive 2002/58/EC, by means of automated procedures involving technical specifications.
20. Right to revoke consent under data protection law
You have the right to revoke your consent to the processing of personal data at any time. Revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
21. Right to automated decisions in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar way, provided that the decision
- is not necessary for the conclusion or performance of any contract between you and us; or
- is authorised by legislation of the Union or the Member States to which we are subject and that legislation provides for appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
- with your express consent. If the decision is
- necessary for the conclusion or performance of a contract between you and us, or e. it takes place with your express consent,
we shall take reasonable measures to safeguard your rights and freedoms and your legitimate interests, which shall include at least the right to obtain the intervention of any person on our part to express his or her point of view and to challenge the decision.
22. Existence of automated decision making
We do not carry out automatic decision making or profiling.
23. Right of appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place of the suspected infringement, if you consider that the processing of personal data concerning you is in breach of the DPA. The supervisory authority to which the complaint has been submitted will inform the complainant of the status and the outcome of the complaint, including the possibility of a judicial remedy under Art. 78 DSGVO.
24. Legal or contractual provisions making the personal data available; necessity for the conclusion of the contract; obligation of the data subject to provide the personal data; possible consequences of not providing it
We would like to inform you that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual regulations (e.g. information on the contractual partner). Sometimes it may be necessary for the conclusion of a contract that you provide us with personal data, which must subsequently be processed by us. For example, you are obliged to provide us with your personal data if you conclude a contract with us. Failure to provide us with your personal data would mean that the contract could not be concluded with you.
Both the German and the English language version of this text is available. The German version is always legally binding.