Informativa sulla Privacy

I. General Information

The Website www.curia.app (“Website”) is a service of Innoplexus AG, hereinafter also referred to as “Innoplexus” or “we”/”us”.
Hereby we inform you about the handling of your personal data. If you use our Website, personal data will be processed.
You can access this data protection declaration at any time under the section “Privacy Policy” at https://curia.app/privacy-policy/ on our Website.

II. Name and address of the controller

Innoplexus, as operator of the Website, is responsible regarding personal data that gets processed because you use our Website.

Innoplexus AG
Frankfurter Straße 27
65760 Eschborn
Germania

Tel.: +49 6196-9677-311
E-Mail: info@innoplexus.com
Web: www.innoplexus.com

Chairman of the Supervisory Board: Martin Korbmacher
Chief Executive Officer: Dr. Gunjan Bhardwaj

III. Contact details of the data protection officer

If you have any questions or if you wish to exercise your data subject rights, please contact our data protection officer at compliance@innnoplexus.com.

IV. Processing personal data

1. Providing the Website and creation of log files

a) Description and scope of data processing

Every time you visit our Website, your browser transmits the following data which gets automatically saved for technical reasons:
– information about your browser type and version
– the operating system you are using
– the previous website from where you are accessing us (referrer URL)
– your IP address
– the date and time when accessing our Website
Our system stores your personal data in log files. This data is not stored with other personal data in relation to you.

b) Legal basis for data processing
We process your data temporarily pursuant to Article 6 Sec. 1 phrase 1 lit. f GDPR.

c) Processing purpose
It is necessary for us to process your IP address temporarily to enable the Website to be made available on your terminal device. Furthermore, we use your personal data to optimize our Website and guarantee the security of our IT systems. These reasons also reflect our legitimate interest in processing your personal data. Your data will not be processed for marketing purposes.

d) Storage period
The aforementioned personal data will be deleted as soon as it is not necessary anymore for achieving the processing purpose. This is the case when the respective session has been ended by you.
IP addresses that were processed in log files, will be deleted after seven days. A longer storage period is only appropriate if your IP address is deleted or alienated, which would make it impossible for us to draw any conclusions from the IP address to your person.

e) Possibility to object and removal according to Article 21 GDPR
It is not possible to object the processing of this data since it is necessary for the Website’s functioning.

2. Cookies

a) Description and scope of data processing
We use so-called cookies on our Website. They serve us to recognize you as a user and to facilitate the usage of our Website. Cookies are small text files which your web browser installs on your terminal device. Mostly so-called “session cookies” are used, they get deleted automatically after your session has been completed.
Other cookies, so-called “persistent cookies”, remain installed on your terminal device until they get removed by you. These cookies allow us to identify your web browser when you visit our Website the next time.
You can check in your web browser the cookies that are installed on your terminal device. Within the predefined scope of your web browser settings you can choose whether cookies should be permitted in individual cases, should not be accepted in general or be deleted automatically after your web browser has been closed. Nevertheless, disabling cookies may limit the possibility to use the Website.
We use cookies to make our Website more user-friendly for you. Therefore, some elements of our Website require the possibility to identify the calling browser after a page change has occurred.

b) Legal basis for data processing
We process your personal data according to Article 6 Sec. 1 phrase 1 lit. f GDPR.

c) Processing purpose
We use technical cookies that are necessary to optimize the usage of our Website. Otherwise we would not be able to offer certain functions on our Website. It is essential for these functions that your web browser gets recognized after a page change has occurred. These purposes also represent our legitimate interest in processing your personal data.
The use of cookies is required for the following applications:
– Use of website functions
We do not use personal data collected by technically necessary cookies to create user profiles.

d) Storage period, possibility to object and removal according to Article 21 GDPR
Cookies that are installed on your terminal device transfer the stored information to our Website. Thus, you have full control whether and how long cookies are able to store informational data. You can deactivate or restrict the transmission of cookies by changing the settings in your web browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. Though, please be aware that while deactivating the use of cookies, it may no longer be possible to use all functions our Website is offering.

3. Google Analytics with anonymization function

a) Description and scope of data processing
We use Google Analytics on our Website, a web analytics service offered by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google”. By using Google Analytics cookies get installed on your terminal device that enable Google to analyse your behaviour when you visit our Website. Such cookies generate information regarding your usage behaviour and transmit the generated information to Google which stores it on servers located in the USA.
Since data protection is very important to us, we allow you to use our Website anonymously. Therefore, we use Google Analytics exclusively with the extension “_gat._anonymizeIp”. This extension ensures the reduction of your IP address within the territory of the European Economic Area (hereinafter “EEA”), which means, your IP address gets anonymized before leaving the EEA. Only when extraordinary circumstances occur will your IP address be transmitted without reduction to a Google server, in this case the reduction process will be carried out in the USA. According to Google´s own statement, your IP address will not be merged with other data collected by Google.
Google is listed as participant of the EU-US Privacy Shield and ensures an appropriate level of data protection, see www.privacyshield.gov/EU-US-Framework .
Further information of how and to what extent your personal data gets processed by Google Analytics can be found in Google’s Privacy Policy under https://www.google.com/analytics/terms/us.html .

b) Legal basis for data processing
We process your personal data according to Article 6 Sec. 1 phrase 1 lit. f GDPR.

c) Processing purpose
Google uses the collected data to analyse how you have used the Website, to prepare and send us a summary of the activity on our Website and to offer other services that are related to the usage of the internet in general or our Website in particular. These purposes represent also our legitimate interest in the processing your personal data.
We collect the information from which geographical region you are accessing the Website and where from you were referred to our Website.
When obliged by law or where Google commissions third parties to process data, it may transfer the collected information to third parties.

d) Storage period
The storage period for cookies used by Google Analytics is restricted to 12 months. You can independently uninstall cookies that got installed by Google Analytics and delete the stored data with it. We will explain how this deletion can be carried out by using your web browser’s settings in the following section.

e) Possibility to object and removal according to Article 21 GDPR
You are free to prevent the installation of cookies by adjusting your web browser settings accordingly. Google offers for the most popular web browsers a deactivation add-on to enable you to control the collection of data on websites which use Google Analytics. The add-on informs Google Analytics’ JavaScript (ga.js) that no information about the visitors of the respective website should be transmitted to Google. However, the deactivation add-on only prevents the transmission of information that got collected by Google Analytic cookies, information generated by other web analytics services we use will still be transmitted. For more information on installing the respective browser add-on, please visit https://tools.google.com/dlpage/gaoptout?hl=en .

4. Possibility of contacting

a) Description and scope of data processing

We integrated on our Website a contact form to offer you the opportunity to get in touch with us. By contacting us through the contact form, all the information which is provided by you, will be transmitted to and stored by us for processing your inquiry.
The following data is collected at the time of your request:
– Name
– E-mail address
At the time of sending your request, the following data will also be processed:
– IP address
– Date and time when the request has been sent
In case you are contacting us via the e-mail-address we made available on our Website, we will process your e-mail-address and all personal data which is associated with your e-mail-address.

b) Legal basis of data processing
We process your personal data pursuant to Article 6 Sec. 1 phrase 1 lit. f GDPR.

c) Processing purpose
We process your personal data only for the purpose of processing your inquiry.
Other personal data which got collected during the transmission process is carried out for our protection, in particular to prevent a misuse of our contact possibilities and an impairment of our IT systems.
These purposes also constitute our legitimate interest in processing your personal data.

d) Storage period
Your personal data gets deleted when it is not necessary anymore to achieve the processing purpose.
Therefore, we delete personal data you sent through the contact form, when the conversation has been ended. The conversation has been ended when the circumstances indicate that the relevant matter has been resolved.
Other personal data which is associated with the contact form and got transmitted through its usage will be deleted after a period of 12 months.

e) Possibility to object and removal according to Article 21 GDPR
You have the possibility to object to the processing of your personal data in accordance to Article 21 GDPR at any time. In such a case, the conversation cannot be continued. Please address your objection to compliance@innoplexus.com. In this case, the personal data processed during the communication will be deleted.

5. Use of Social Media Buttons

On our Website we integrate the following social networks by providing a hyperlink to access them:
facebook-components
Instagram-components
LinkedIn-recommendation-components
The purpose and scope of the data collection and the further processing and use of the data by the providers on their pages as well as your rights in this regard and possible configuration settings for protecting your privacy can be found in the privacy policies of the respective social network providers:
facebook – http://www.facebook.com/policy.php
Instagram – https://help.instagram.com/402411646841720
LinkedIn – http://www.linkedin.com/legal/privacy-policy

V. Rights of the data subject

Regarding the processing of your personal data on our Website, you are a data subject within the meaning of the GDPR, therefore, you are entitled of the following rights towards us:

1. Right to be informed

You have the right to request information about your personal data processed by us at any time. This includes information about the origin, recipients or categories of recipients to whom we transfer your data and the purposes for which we process your personal data.

2. Right to rectification

You have the right to request the rectification of inaccurate personal data concerning you and to have incomplete personal data completed.

3. Right to erasure and right to restriction

You can ask us to delete your personal data immediately. We are obliged to carry out the deletion immediately unless we are obliged to further process your personal data on the basis of contractual and/or legal regulations. This is the case, for example, if we are prohibited from deleting data under tax law. In such a case we restrict the processing and delete the personal data in question immediately after expiry of the retention period.

4. Right to data portability

You have the right to receive your personal data you have provided in a structured, current and machine-readable format, if this is technically possible. Furthermore, you have the right to transfer this data to another controller without any hindrance.

5. Rights in relation to automated decision making and profiling

You have the right not to be subject of a completely automated decision-making process – including profiling – that has a legal effect against you or significantly impairs you in a similar manner.

6. Right to appeal to a supervisory authority

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is contrary to the GDPR.
Our competent supervisory authority is:

Der Hessische Datenschutzbeauftragte
Gustav-Stresemann-Ring 1, 65189 Wiesbaden
Postfach 31 63, 65021 Wiesbaden
Telefon: (0611) 14 08-0
Telefax: (0611) 14 08-900
poststelle@datenschutz.hessen.de