We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.
1. Controller for data processing (hereinafter: “we”)
Craftview Software GmbH Mainzer Landstr.178-190, D-60327 Frankfurt a. Main Germany
Phone: 02823-4256 – 0 Fax: 02823-4256 – 999
E-Mail: info@craftview.de
Authorized representative management:
Mr. Dr. André Rasquin
Phone: 02823-4256 – 0 Fax: 02823-4256 – 999
E-Mail: info@craftview.de
2. Data Protection Officer and competent supervisory authority:
Creditreform Compliance Services GmbH Hammfelddamm 13 D – 41460 Neuss
Tel.: 02131 / 109 1072
E-Mail: datenschutz-extern@craftview.de
Competent supervisory authority:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf
Phone: 0221 / 38424-0
Fax: 0211 / 38424-10
E-Mail: poststelle@ldi.nrw.de
3. Personal data, purposes of processing and legal bases
The use of our website is generally possible without providing personal data. Providing personal data is voluntary.
Personal data means any information relating to an identified or identifiable natural person (hereinafter “data subject”). A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the identity of that natural person.
The purpose of data processing is to operate a website with information about our service offerings as well as contact options and contract conclusions.
Personal data is collected on our website when this is:
a) For the use of the website (Legal basis: Article 6 (1) lit. a and/or Article 6 (1) lit. b GDPR),
b) for the protection of our interest in improving user experience and maintaining security of use (Legal basis: Article 6 (1) lit. f GDPR),
c) for the use of the services offered on the website as well as pre-contractual measures, in particular for form entries (Legal basis: Article 6 (1) lit. a and/or Article 6 (1) lit. b GDPR), or
d) for a contract conclusion and contract execution (Legal basis: Article 6 (1) lit. a and lit. b GDPR).
4. Duration of storage
The duration of storage of personal data is based on the relevant statutory retention periods (e.g. commercial and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is required for the performance or initiation of a contract or if we have a legitimate interest in further storage, the data will be deleted as soon as it is no longer required for these purposes or you have exercised your right of withdrawal or objection.
5. Transfer of data
Your personal data will not be transferred to third parties unless:
a) we have explicitly pointed this out in the description of the respective data processing,
b) you have given express consent pursuant to Art. 6 (1) lit. a GDPR,
c) the disclosure is necessary pursuant to Art. 6 (1) lit. f GDPR for the establishment, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
d) in the event that there is a legal obligation for disclosure pursuant to Art. 6 (1) lit. c GDPR, and
e) insofar as this is necessary pursuant to Art. 6 (1) lit. b GDPR for the processing of contractual relationships with you.
We also use external service providers to process our services, which we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly monitored by us. Where necessary, we have concluded data processing agreements with them in accordance with Art. 28 GDPR. These include service providers for web hosting, sending emails, as well as maintenance and servicing of our IT systems, etc. These service providers will not pass on this data to third parties.
Transfers of data to countries outside the European Union and the European Economic Area (“third countries”) generally do not take place and will only occur if the following conditions are met:
a) The fulfillment of a legal authorization provision
b) In particular, we ensure an adequate level of data protection in accordance with the EU Standard Contractual Clauses for the transfer of personal data to processors in third countries by concluding corresponding contracts. A copy of the Standard Contractual Clauses issued by the EU Commission can be found on the Internet at:
https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=EN
A transfer of data abroad or to supra- or international organizations only takes place if this is legally permissible or required.
Currently, there may be no adequate guarantees for transfers of data to the USA. The protection of personal data is limited. This results from the fact that security authorities in the USA may access data transferred from the EU to the USA under U.S. law and may use it without limitation to what is strictly necessary. As a data subject, you may not be able to take legal action against such use unless you hold U.S. citizenship.
6. Your rights
You are entitled, provided the legal requirements are met, to the following rights:
a) Pursuant to Art. 7 (3) GDPR, you may revoke your consent at any time. This also applies to the withdrawal of consent declarations granted before the GDPR became applicable, i.e., prior to 25.05.2018. The revocation of consent means that we may no longer continue the data processing that was based on this consent in the future;
b) Pursuant to Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
c) Pursuant to Art. 16 GDPR, to immediately request the correction of inaccurate or completion of your personal data stored with us;
d) Pursuant to Art. 17 GDPR, to request the deletion of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims;
e) Pursuant to Art. 18 GDPR, to request the restriction of processing of your personal data if the accuracy of the data is contested by you, the processing is unlawful, but you oppose its deletion and we no longer need the data, but you require it for the establishment, exercise or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR;
f) Pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transfer to another controller, and
g) Pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. In general, you can contact the supervisory authority responsible for our company.
If you have further questions about the protection of your personal data, these privacy notices, or consent declarations given, you may of course contact us and/or our data protection officer at any time. You may also direct any complaints regarding the handling of your personal data to us and/or our data protection officer.
Right to object
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) lit. f GDPR, you have the right to object to the processing of your personal data at any time, provided there are reasons arising from your particular situation.
An objection to the processing referred to in section 3 e – direct marketing – can be made at any time without stating reasons.
If you wish to exercise your right to object, a simple declaration to us is sufficient, preferably by e-mail to datenschutz-extern@craftview.de.
7. Collection of personal data when visiting our website
When you use the website for information purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data, which are technically necessary for us to display our website and to ensure stability and security (legal basis is Art. 6 (1) lit. f GDPR):
a) IP address
b) Date and time of the request
c) Time zone difference to Greenwich Mean Time (GMT)
d) Content of the request (specific page)
e) Access status/HTTP status code
f) Amount of data transferred in each case
g) Website from which the request comes
h) Browser
i) Operating system and its interface
j) Language and version of the browser software.
8. Contact form
8.1 General
Data transmitted via the contact form, including your contact details, is stored in order to process your inquiry or to be available for follow-up questions. This data will not be passed on without your consent.
The processing of the data entered in the contact form takes place exclusively on the basis of your consent (Art. 6 (1) lit. a GDPR). You may revoke your consent at any time. A simple informal notification by e-mail to datenschutz-extern@craftview.de is sufficient. The lawfulness of data processing operations carried out up to the time of revocation remains unaffected.
Data transmitted via the contact form will remain with us until you request deletion, revoke your consent to storage, or the necessity of data storage no longer applies. Mandatory legal provisions – in particular retention periods – remain unaffected.
9. Newsletter
9.1 General
To send our newsletter, we need your e-mail address. Verification of the specified e-mail address is necessary, and subscription to the newsletter must be confirmed. No further data is collected or only on a voluntary basis. The data will be used exclusively for sending the newsletter.
The data entered when registering for the newsletter is processed exclusively on the basis of your consent (Art. 6 (1) lit. a GDPR). You may revoke your consent at any time. To unsubscribe from the newsletter, you can use the “Unsubscribe” link in the newsletter. The lawfulness of data processing operations already carried out remains unaffected by the revocation.
Data entered to set up the subscription will be deleted in the event of unsubscription. If these data have been transmitted to us for other purposes and elsewhere, they will remain with us.
9.2 CleverReach
We use CleverReach to send newsletters. Provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. With this service, we can organize the newsletter distribution. The data you enter to subscribe to the newsletter, such as your e-mail address, are stored on CleverReach servers. Server locations are Germany and Ireland.
CleverReach is prohibited from selling the data and/or using it for other purposes. More information can be found here.
10. Social media portals
10.1 Shariff method for sharing blog posts
We enable the sharing of our blog posts on Facebook, Twitter and Google+, YouTube and Instagram via share buttons using the so-called “Shariff” method. With this solution, direct contact between the user and the social media portal is only established when the user actively clicks on the share button. Clicking the share button thus constitutes a declaration of consent under Art. 6 (1) lit. a GDPR by the user to transfer the data to the respective social media portal.
10.2 Links to social media portals
Social networks – Facebook, Twitter, Xing, LinkedIn, Instagram and Pinterest – are otherwise integrated into our website mainly in the form of links to the respective services. After clicking on the embedded text/image link, you will be redirected to the page of the respective provider. Only after the redirection are user details transferred to the provider. We have no knowledge nor influence on the extent of data processing by the providers once you access their site. Please refer to the respective privacy policies of the providers you use for information on the handling of your personal data when using these websites.
10.3 Company presence on social networks
We are present on the following social networks:
a) Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland
b) Twitter International Company, One Cumberland Place Fenian Street, Dublin 2, D02 AX07 Ireland
c) Instagram Inc., Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland
d) LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
e) XING – New Work SE, Am Strandkai 1, 20457 Hamburg, Germany
f) Pinterest Europe Ltd. Palmerston House 2nd Floor Fenian Street Dublin 2, Ireland.
Responsible entity for other social networks: Should you visit our company profile with one of the above providers, your personal data will be processed by the respective provider, who is responsible for the processing within the meaning of the GDPR. To exercise your rights as a data subject, we point out that this can be done most effectively with the respective providers. Only they have access to the data collected from you. Should you nevertheless need assistance, please feel free to contact us at any time.
Data Protection Officer: Information on contacting the Data Protection Officer of the respective social media providers can be found here:
a) Facebook: Questions about the Data Policy: https://de-de.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
b) Twitter: https://help.twitter.com/de/forms/privacy
c) Instagram Inc.: https://help.instagram.com/contact/1845713985721890
d) LinkedIn Ireland Unlimited Company: https://www.linkedin.com/help/linkedin/ask/TSO-DPO
e) XING – New Work SE: https://www.xing.com/settings/privacy/data/disclosure
f) Pinterest: privacy-support@pinterest.com
Processing of personal data due to the transfer of data via social networks to us: As soon as you contact us via the various communication channels provided by social networks, we are independently responsible for the legality of data processing. If you contact us via different communication channels (e.g. chat function or comment function) of social networks, we will process your data for the purpose of responding to your request so that we can handle your request in the best possible way. The legal basis for this processing is our legitimate interest in responding to your communication pursuant to Art. 6 (1) lit. f GDPR.
In addition, we receive anonymous statistical data from the providers for evaluation. These statistics are based on usage data, but we do not gain access to the underlying usage data. The processing of these data is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR.
10.4 YouTube
For the integration and presentation of video content, our website uses plug-ins from YouTube. Provider of the video portal is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you visit a page with an embedded YouTube video, this will only be loaded if you have previously consented to it in our cookie banner. Nevertheless, a connection to YouTube is established, e.g., with information about the page from which the connection was made.
YouTube can associate your browsing behavior directly with your personal profile if you are logged into your YouTube account. You can prevent this by logging out beforehand.
We have no influence and only limited knowledge about how and to what extent your data is processed.
The legal basis for the integration of YouTube and the associated transfer of data to Google is your consent (Art. 6 (1) lit. a GDPR).
Details on the handling of user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy.
11. General contact
As soon as you contact us – via e-mail or phone – and provide us with your contact details, we process these contact details (name, e-mail address, telephone number) for correspondence.
The legal bases for this are both Article 6 (1) lit. b and Article 6 (1) lit. f GDPR. Contacting us for business-to-business (B2B) marketing purposes, considering a balancing of interests, can be regarded as a legitimate interest within the meaning of the latter provision.
These data will not be passed on to third parties without your consent and will be deleted immediately after contact, unless further use arises. In the case of Art. 6 (1) lit. f GDPR, you may object to the processing, unless applicable laws, including those for contract fulfillment pursuant to Art. 6 (1) lit. b GDPR or statutory retention obligations, permit or require data processing.
12. Cookies
Our website uses cookies that are stored by your device’s browser and contain certain settings for the use of the website (e.g. for the current session). Cookies help make our offering more user-friendly, effective, and secure. Cookies are small text files stored on your computer by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted after you close the browser. Other cookies remain stored on your device until you delete them or their storage period expires. These cookies allow us to recognize your browser the next time you visit.
In part, cookies serve to simplify website processes by storing settings (e.g. storing already selected options). If personal data is also processed by individual cookies implemented by us, processing takes place either pursuant to Art. 6 (1) lit. b GDPR for the execution of a contract, or pursuant to Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the website visit. You can configure your browser to inform you about the setting of cookies, allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. Cookie settings can be managed under the following links for the respective browsers:
a) Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
b) Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-
c) Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
d) Opera: https://help.opera.com/en/latest/web-preferences/#cookies
You can also manage cookies of many companies and features used for advertising individually. Use the respective user tools available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.
Most browsers also offer a so-called “Do Not Track” function. When this function is activated, your browser notifies ad networks, websites, and applications that you do not want to be “tracked” for purposes of behavioral advertising and the like. Information and instructions on how to manage this function can be obtained from your browser provider at the following links:
a) Google Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de
b) Mozilla Firefox: https://www.mozilla.org/de/firefox/dnt/
c) Internet Explorer: https://support.microsoft.com/de-de/help/17288/windows-internet-explorer-11-use-do-not-track
d) Opera: http://help.opera.com/Windows/12.10/de/notrack.html
In addition, you can generally prevent the loading of so-called scripts. “NoScript” allows the execution of JavaScripts, Java, and other plug-ins only for trusted domains of your choice. Information and instructions on how to manage this function can be obtained from your browser provider (e.g., for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).
Please note that disabling cookies may limit the functionality of our website.
This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consents.
Borlabs Cookie does not process any personal data.
The borlabs-cookie stores the consents you gave when entering the website. If you wish to revoke these consents, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent.
Here you can view and change your cookie consent!
13. Google Analytics
We use Google Analytics on this website, a web analytics service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).
Google analyzes your use of this website on our behalf. For this purpose, we use cookies, which are described in detail in the cookie table above. The information collected by Google about your use of this website (e.g., the referring URL, the pages you visit with us, your web browser used, your language setting, your operating system used, or your screen resolution) is transmitted to a Google server in the USA, stored there, analyzed, and the result is made available to us in anonymized form. Your usage data is not linked with your full IP address. We have activated the IP anonymization function offered by Google on this website, so that the last octet (type IPv4) or the last 80 bits (type IPv6) of your IP address are deleted. Through special agreements with Google, we ensure that an adequate level of data protection is established for data at Google in the USA.
The legal basis for the use of Google Analytics is Art. 6 (1) sentence 1 lit. a GDPR and thus your consent. You can revoke your consent to web analytics at any time by either downloading and installing the available browser plugin from Google (https://tools.google.com/dlpage/gaoptout?hl=de) or by clicking on the following switch, whereby an opt-out cookie is set.