Privacy Policy
We, the WIBU-SYSTEMS AG, Zimmerstrasse 5, 76137 Karlsruhe, Germany (hereinafter “we/our"), take the protection of your personal data very seriously and strictly adhere to all applicable laws and regulations on data protection, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG). The following explanations will give you an overview of how we ensure this protection and which data we process for which purpose.
Controller within the meaning of Art. 4 No 7 GDPR
WIBU-SYSTEMS AG
Zimmerstrasse 5
76137 Karlsruhe
Germany
Tel.: +49-721-93172-0
Fax: +49-721-93172-22
e-mail: info(at)wibu.com
Usage data
Every time you access our website and every time you retrieve a file, general data about this process is automatically stored in a log file. The storage serves exclusively system-related and statistical purposes (on the basis of Art. 6 para. 1 letter b) GDPR), as well as in exceptional cases for reporting criminal offences (on the basis of Art. 6 para. 1 letter e) GDPR).
The data will not be passed on to third parties or evaluated in any other way, unless there is a legal obligation to do so (Art. 6 para. 1 letter e) DSGVO).
In detail, the following data record is stored for each retrieval:
- name of the retrieved file
- date and time of retrieval
- the amount of data transferred
- message as to whether the retrieval was successful
- description of the type of web browser used
- operating system used
- the previously visited page
- provider
- your IP address
Personal data
Personal data will only be processed by us if we are legally permitted to by statutory provisions or you haven given us your consent.
In detail:
- Contact:
If you contact us, we will store your data on the basis of Art. 6 para. 1 letter b) GDPR for the purpose of processing your request, as well as in the event that further correspondence should take place. - Corporate Newsletters:
We would be pleased to inform you about current topics concerning our products and our company via our newsletter.
To send a newsletter we need your name and your e-mail address. You can enter both in the forms provided.
Your data will only be processed by us for the purpose of sending you our newsletter.
You can unsubscribe from the newsletter at any time and thus object to the further use of your data. At the bottom of each newsletter, you find the link to unsubscribe.
The legal basis for data processing is Art. 6 para. 1 letter b) GDPR. - Product Release Notes and Product Change Notifications:
With our Tech News Flash and our PCN services, we provide our customers with information about product updates and upgrades, security enhancements, and end-of-life notifications. As a customer, you will receive this information without your explicit consent.
The legal basis for data processing is Art. 6 para. 1 letter f) GDPR.. - Registrations:
In order to use our support and download offer or webinar offer, you must register on our website.
For this purpose we need various information from you, e.g. first and last name, address, e-mail address. You will also be asked to enter a user name and set up a password to secure your account.
For verification you will also receive an email from us to the email address you provided, in which you must click on a confirmation link.
Your data will only be used by us for the purpose of administering your registration and, if necessary, for contacting you or providing services in connection with your registration.
With your access data you also have the possibility to complete or update your data at any time.
The legal basis for this data processing is Art. 6 para. 1 letter b) GDPR, or your consent upon completion of your registration and thus Art. 6 para. 1 letter a) GDPR. - Webinars:
For webinars we use the tool "Go-to-Webinar" provided by LogMeIn Ireland Limited, Bloodstone Building Block C, 70 Sir John Rogerson's Quay, Dublin 2, Ireland. We have entered into a data protection agreement with LogMeIn to process your personal data in accordance with legal requirements.
The legal basis for this data processing is Art. 6 para. 1 letter b) GDPR, or your consent upon completion of your registration and thus Art. 6 para. 1 letter a) GDPR. - Podcast:
For podcasts, we use the services provided by Podtrac, Inc., PO Box 30576, Alexandria, VA 22310, USA.
When you use our podcasts, Podtract will collect your IP address, the time of retrieval, the retrieved medium, and several parameters from the HTTP header. We receive regular analyses from this data to monitor and improve the quality and reach of our podcasts.
The legal basis for this data processing is Art. 6 para. 1 letter f) GDPR. For more information about the privacy policy of Podtract, see https://analytics.podtrac.com/product-privacy-statement. - Orders:
If you place an order with us, your data (first and last name, address, e-mail address, payment data, etc.) will be processed by us exclusively for this purpose and, if necessary, transmitted to companies involved in the performance of the contract (suppliers, payment service providers). The legal basis for this data processing is Art. 6 para. 1 letter b) GDPR.
No further data processing takes place. - Applications and applications process:
If you apply for one of our job advertisements, we store your data on the basis of Art. 6 para. 1 letter a) GDPR for the purpose of carrying out and handling the application process. In any case, the data processing is permitted pursuant to Art. 6 para. 1 letter b) GDPR for the implementation of a pre-contractual measure in the form of the implementation and handling of the application process.
The personal data transmitted to us in the context of your application will only be processed for purposes in connection with your interest in employment with us and the processing of your application. The data will not be passed on to third parties.
If your application is successful, your details will be transferred to the personnel file.
If your application is not successful, we will delete your data after completion of the application process and the legal retention period.
Cookies
We use so-called cookies in some areas of our website. Such file elements allow your computer to be identified as a technical unit during your visit to this website in order to facilitate your use of our services - even during repeated visits.
As a rule, however, you have the option of setting your Internet browser so that you are informed about the use of cookies and can either accept or exclude them or delete existing cookies.
Please use the help function of your Internet browser to obtain information on how to change these settings. Please note that some features of our website may not work if you have disabled the use of cookies.
Cookies do not allow a server to read private data from your computer or data stored by another server. They do no damage to your computer and contain no viruses.
The use of cookies is based on art. 6 par. 1 letter f) GDPR: the processing is carried out to improve the functioning of our website. It is therefore necessary to protect our legitimate interests.
Use of analysis tool "Matomo" (previously known as "Piwik")
Our website uses Matomo (https://matomo.org/), an open-source software to analyze visitor access to our website. Matomo uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about the use of this website is stored on our servers in Germany and not passed on to third parties. Your IP address will be anonymized immediately after processing and before it is stored.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website.
You can also object to the use of your data by Matomo by making use of the following option:
A cookie is stored on your browser, which only contains the information that no data may be collected about you by Matomo. Previously stored cookies are then deleted. However, should you delete all cookies in your browser, you may have to object to the use of your data again.
You can decide here whether a unique web analysis cookie may be stored in your browser to enable us to collect and analyze various statistical data. If you choose not to, you can place the Matomo deactivation cookie in your browser by clicking on the following link.
The use of the aforementioned analysis tool is based on Art. 6 para. 1 letter f) GDPR: the processing takes place for the analysis of the usage behavior and is therefore necessary to protect our legitimate interests.
Pardot
Our US website also uses Pardot, a service of Salesforce.com Inc., The Landmark @ One Market Street, San Francisco, CA 94105, USA. Pardot sets a maximum of three cookies. These are text files that are stored on your computer and allow an analysis of the use of the website. The cookies set are a "Visitor Cookie", an "Opt-In Cookie" and a "Pardot App Session Cookie". An identification number is generated via the "visitor cookie", which is used to recognize the visitor's browser. The identification number is a generated numerical code that has no meaning outside of Pardot Services. The "Opt-In Cookie" ensures that no "Visitor Cookie" is set by those visitors who have chosen the "Do Not Track" setting in their browser. The "Pardot App Session Cookie" is only set if a customer logs into the Pardot App as user. All cookies only receive the generated number code. Personal data is not collected in this respect. If you want to prevent tracking by Pardot, you can ensure this by your browser settings, or by a corresponding extension of your browser.
User Local
Our website for the Japanese market uses User Insight, an access analytical tool provided by User Local, Inc. (4th floor, 2-11-1 Osaki, Shinagawa-ku, Tokyo 141-0032, Japan) to monitor the site and in turn improve our services. To do so, a cookie containing a time stamp may be placed in your web browser. We also send access information (web address, user agent, etc.) to User Local's server in Japan and use this information for the sole purpose of analyzing how our site is used and improving your user experience. The collected data is managed in accordance with the privacy policy of User Local Inc., which you can check at https://info.userlocal.jp/data_policy/.
reCAPTCHA
For your protection we use the service invisible reCAPTCHA of the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google"). The query serves to differentiate whether the input is made by a person or abusively by automated machine processing. The query includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose your input will be transmitted to Google and used there.
However, if IP anonymization is activated on this website, Google will reduce your IP address within Member States of the European Union or in other countries party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser within the scope of reCAPTCHA is not merged with other Google data.
The deviating data protection regulations of the company Google apply to this data. For more information about Google's privacy policy, please visit: https://policies.google.com/privacy.
We would like to point out that IP anonymization is active on this site in order to guarantee anonymous collection of IP addresses (so-called IP masking).
The use of invisible reCAPTCHA is based on Art. 6 para. 1 letter a) GDPR. With confirmation of the inquiry you give us your consent to data processing. In any case, data processing is permissible pursuant to Art. 6 para. 1 letter f) GDPR; the query serves to protect access and is intended to ensure human action. It is therefore in our legitimate interest.
URL Shorteners
To provide hyperlinks (including external links), we use URL shortening services provided by Bitly, Inc., 139 5th Avenue, 5th Floor, New York, NY 10010, United States, and Yourls (https://yourls.org/). The legal basis for this is our legitimate interest in the economical operation of our online services in acc. with Art. 6 para. 1 letter f) GDPR. We use Bitly for the anonymous performance monitoring of these links. When you click a Bitly link, your query is first sent to and stored by a Bitly server, before being passed on to the target URL. Bitly uses cookies to track the origin of the clicks for Bitly links. Bitly can, for instance track which Bitly links a user has clicked. Bitly, Inc. is part of the EU-US Privacy Shield and the Swiss-US Privacy Shield. You can find the privacy policy of Bitly at https://bitly.com/pages/privacy.
Yourls also enables the use of shortened links, but is not hosted by an external provider. In this case, the monitoring and statistical analysis of the links are processed by us.
Flipping Books
We use the tool Joomag of Joomag, Inc. 75 E. Santa Clara St., Floor 6, San Jose, CA 95113, United States, to produce flipping books. When using these books, some usage data and browser parameters are transferred to Joomag. You can find the privacy policy of Joomag at https://www.joomag.com/en/privacy.
The legal basis for the use of the plug-ins is Art. 6 para. 1 letter f) GDPR.
Google Search Console
We use the Google Search Console service provided by Google Inc,. 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, to analyze the use of our website and improve its usability.
When a Google service is used, the data for this service is not collected by us or in our responsibility, but directly by Google.
As proprietor of the domains, Google provides us with access to the analyses and evaluation of the Google data. As part of this, we only have access to data relating to our domains.
The privacy policy of Google applies to this data, which you can find at: https://policies.google.com/privacy?hl=en.
Social Media
We currently use the following social media plug-ins: Facebook, Twitter, LinkedIn (including SlideShare), Flickr, and YouTube. We use the so-called Shariff solution. This means that when you visit our website, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the marking on the box above its initial letter or the logo. We offer you the possibility to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online offer. In addition, the data specified in section 2 of this policy will be transmitted. In the case of Facebook, according to the provider, the IP address is anonymized in Germany immediately after collection. By activating the plug-in, personal data is transferred from you to the respective plug-in provider and stored there (for US providers in the USA). Since the plug-in provider collects data mainly via cookies, we recommend that you delete all cookies before clicking on the grayed-out box using your browser's security settings.
We have no influence on the data collected and data processing processes, nor are we aware of the full extent of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.
The plug-in provider stores the data collected about you as user profiles and uses these for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation takes place in particular (also for users who are not logged in) for the representation of demand-fair advertisement and in order to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, for which you must contact the respective plug-in provider to exercise this right. Through the plug-ins we offer you the possibility to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 letter f) GDPR.
The data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected with us will be directly assigned to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, especially before activating the button, as this way you can avoid being assigned to your profile with the plug-in provider.
For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the data protection declarations of these providers as notified below. They will also provide you with further information about your rights in this regard and setting options to protect your privacy.
The data provided to us by social media providers are processed by us by means of the social media management software “Hootsuite”. We have a legitimate interest in using the software in accordance with Art. 6 para. 1 letter f) GDPR.
Hootsuite enables us to manage several social media accounts. Posts can be prepared, planned, published, liked, and shared, and the channels of different providers can be monitored within Hootsuite to pinpoint relevant discussions in the social web concerning our company, brands, products and services.
We have only limited access to your user data. The user data primarily includes your publically accessible profile data (cf. 3. Personal Data). We have no complete knowledge of the extent to which Hootsuite collects your user data.
For more information about the privacy policy of Hootsuite see:
https://hootsuite.com/legal/privacy.
Addresses of the respective plug-in providers and URL with their data protection information:
Facebook Inc, 1601 S. California Ave., Palo Alto, California 94304, USA; https://www.facebook.com/policy.php; further information on data collection: https://www.facebook.com/help/186325668085084.
Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC.
Google Inc, 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=en.
Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/participant?ID=a2zt000000001L5AAI.
Twitter, Inc. 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy.
Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO.
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; https://www.linkedin.com/legal/privacy-policy.
LinkedIn has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0.
Flickr: SmugMug, Inc., 3347 Shady Spring Lane, Mountain View, CA 94040, USA; https://policies.oath.com/ie/de/oath/privacy/products/flickr/index.html.
YouTube: see Google.
Hootsuite: 5 E 8th Ave, Vancouver, BC V5T 1R6, Canada https://hootsuite.com/legal/privacy.
Duration of Data Retention
Your personal data will be stored for the duration of the respective legal retention period and subsequently deleted routinely, unless your personal data is still required thereafter to achieve the respective storage purpose (e.g. to fulfil the contract or to initiate the contract).
After 3 years at the latest, we will check whether your data is still needed and whether there is a legal obligation to store it.
Your rights as data subject
- Right of Access:
You have the right to request confirmation from us whether personal data concerning you will be processed.
Please send an email to dataprotection(at)wibu.com.
As a registered customer you can also contact us at https://my.codemeter.com. - Rectification / Erasure / Restriction of Processing:
Furthermore, you have the right to require us to
- correct incorrect personal data concerning you without delay (right of correction);
- delete personal data relating to you immediately (right of deletion) and
- restrict the processing (right to restrict processing).
Please send an email to dataprotection(at)wibu.com.
As a registered customer you can also contact us at https://my.codemeter.com. - Data Portability:
You have the right to receive personal data concerning you, which you have provided to us, in a structured, common and machine-readable format and to transmit this data to another person responsible.
Please send an email to dataprotection(at)wibu.com.
As a registered customer you can also contact us at https://my.codemeter.com. - Right to Revoke:
You have the right to revoke your consent at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.
Please send an email to dataprotection(at)wibu.com.
As a registered customer you can also contact us at https://my.codemeter.com. - Right to Object:
If the processing of personal data concerning you is necessary for the performance of a task which is in the public interest (Art. 6 para. 1 letter e) GDPR) or for the protection of our legitimate interests (Art. 6 para. 1 letter f) GDPR), you have a right of objection.
Please send an email to dataprotection(at)wibu.com.
As a registered customer you can also contact us at https://my.codemeter.com. - Right of Appeal:
If you believe that the processing of personal data concerning you violates the GDPR, you have the right of appeal to a supervisory authority, without prejudice to any other remedies.
Our Data Protection Officer
WIBU-SYSTEMS AG
Dr. Peer Wichmann
Zimmerstrasse 5
76137 Karlsruhe
Germany
Phone: +49-721-93172-0
Fax: +49-721-93172-22
email: dataprotection(at)wibu.com
External links
This privacy policy does not extend to the websites of other providers that are linked to our websites. We also assume no responsibility for the contents of these pages. Please note that privacy policies and data protection practices, e.g. at Google, are subject to constant change. It is therefore advisable and necessary to keep abreast of changes in the legal provisions and practice of companies on an ongoing basis.
Security
For the security of your data we use the latest Internet technologies. During the online inquiry process your data is secured with SSL encryption. For secure storage of your data, our systems are protected by firewalls that prevent unauthorized access from outside.
In addition, we use technical and organizational security measures to protect your personal data provided to us from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our contractual partners who have access to your data in order to provide services to you on our behalf are contractually obliged to maintain data protection and confidentiality.
Reservation of amendments
We reserve the right to occasionally adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new privacy policy will then apply for your next visit. The current version can be found on the website https://www.wibu.com.
Transfer of data
If we use subcontractors to provide our services, we take appropriate legal precautions as well as appropriate technical and organizational measures to ensure the protection of personal data in accordance with the relevant legal regulations.
If data is transferred to a third country, i.e. a country in which the GDPR is not a directly applicable law, i.e. countries outside the EU or the European Economic Area, the data will only be transferred if an appropriate level of data protection is ensured, or if your consent or other legal permission is available.
The transfer of data could make use of auxiliary services like transportation or telecommunication services.