1. Field of Application
2. Personal Data
Personal data is the information that helps identify an individual, i.e. information that can be traced back to a person. This typically includes a name, email address or phone number. In addition to this, however, purely technical data that can be associated with a person is also regarded as personal data.
3. Automatic Compilation of Access Data and Server Log Files
A range of technical data relating to personal data is automatically compiled whenever the website is accessed. This data is:
- The IP address of the user
- Directory protection user
- Name of the website or file accessed
- Date and time of access
- Amount of data transferred
- Status code
- Referrer URL (the page previously visited)
- Host name accessed
This data is not merged with other personal data which you actively enter whilst using the website.
The IP addresses are anonymised immediately after they have been surveyed. This is done by removing the final block of numbers.
The server log files containing the data outlined above are automatically deleted after 7 days. We maintain the right to save the server log files for a longer period of time when circumstances arise that suggest inappropriate access (such as an attempt to hack the website or a so-called DoS attack). Access over FTP will be anonymously logged and stored for 60 days.
Server log files are collected in order to facilitate the website’s general functionality. This data processing is supported by the General Data Protection Regulation (GDPR) Art. 6 (1) lit f, according to which data processing is permitted if it is in the legitimate interests of the data processor. There exists a legitimate interest for emcra GmbH in the storage of server log files for the purposes of maintaining the website’s functionality.
4. What is an IP Address?
Every device (e.g. smartphone, tablet, PC) that is connected with the internet is allocated an IP address. The nature of the IP address depends on the internet access that is currently connecting your device to the internet. This can be the IP address that is given to you by your internet provider if you are using the WiFi at your own home, but it can also be an IP address that has been provided by your mobile contract provider or by the provider of public or private WiFi or other form of internet access. In its current format (IPv4), an IP address consists in four numerical sequences separated by dots. As a private user you will usually not use a constant IP address, since it has only been temporarily allocated to you by your provider (so-called ‘dynamic IP address’). It is possible to definitively assign user data when a permanently allocated IP address (so-called ‘static IP address’) is used. Other than for tracking unauthorised access to our internet offer, we will not use this data in a way specific to the individual. It will be analysed solely on an anonymous basis to view which of our websites have been favourited, how often they have been accessed daily and other similar information.
Our websites already support the new IPv6 addresses. If you are already using an IPv6 address you should be aware of the following: the IPv6 address consists in eight groups of four. The first four blocks are typically assigned dynamically for private users, just as with the entire IPv4 address. The last four blocks of an IPv6 address (so-called ‘Interface Identifier’) are, however, determined by the device used to browse the website. Unless this has been configured differently by your operating system, the so-called MAC address will be used here. A MAC address is a kind of serial number that has been uniquely assigned to every IP-capable device worldwide. Because of this, we will not save the last four blocks of your IPv6 address. In general we recommend that you activate the so-called ‘Privacy Extensions’ on your device in order to anonymise the last four blocks of your IPv6 address. Most operating systems offer a ‘Privacy Extensions’ function which is in some cases, however, not preset in factory mode.
5. User Profile
It is possible to use the digital transformation tools without setting up an account. You can, however, also set up an account at digital-transformation-tool.eu. This offers you the possibility of leaving the online learning tool and then picking up again where you left off when you next log in. Additionally, each time you log in you will be shown which learning modules you have already dealt with. As part of setting up an account at digital-transformation-tool.eu you will be asked to enter a range of personal data (e.g. surname, forename, username, email). Please do not use a private email address at this point. Instead, only use the email address of your organisation. We will save this data so that we can carry out the services detailed above. You can look at or change your data at any time under the heading “User Account”. Please let us know by email at any point if you would like to change your username or delete your user account. To do so, use the email address given below under “Contact”.
This data processing is supported by the General Data Protection Regulation (GDPR) Art. 6 (1) lit b, according to which data processing is permitted if it is necessary for the performance of a contract (here the user contract for the digital transformation tools).
When you use the online learning tool, the software also saves your IP address in a log file for 35 days. This is to enable easier administration and troubleshooting. The IP addresses and log files are analysed anonymously. The legal basis for the log files being saved is Article 6 Section 1 letter f of the GDPR, in other words our legitimate interests (for this see the parallel remarks on 3.).
6. Email delivery; Consent
We will use your email address to send you information on the subject digital transformation if you have accepted the following declaration of assent when applying for an account:
“I accept that I will receive information about the topic digital transformation via email from emcra GmbH. I can withdraw my consent with effect for the future at any time without giving reasoning.”
You can revoke this declaration of consent at any point with future effect. To do this you can contact firstname.lastname@example.org at any time.
We save log files, which contain information about emails that are sent. The purpose of this is to guarantee the functionality of our email service and to guard against spam. For any emails that are sent out of our web environment, the log files are anonymised after a day and deleted after 60 days. If emails are sent via our email server, the log files are deleted after four weeks. The legal basis for the log files being saved is Article 6 Section 1 letter f of the GDPR, in other words our legitimate interests (for this see the parallel remarks on 3.).
Information provided by the user will be saved whenever contact is made with us (for example with the contact form or via email). This is to help us deal with the request and in case follow-up questions arise.
Cookies are small text files which are saved on your device through the browser you are using when you access our website. Individual services on our website can hereby ‘recognise’ and ‘remember’ which settings you have chosen. This supports the user-friendliness of websites on the one hand and thereby serves users (e.g. saving login information). On the other hand, cookies help gather statistical data about the usage of a website. This data can then be used for analysis and advertising purposes.
Some cookies are automatically deleted from your device as soon as you leave the website (co-called ‘session cookie’). Other cookies are saved for a specific length of time, but never longer than two years (‘persistent cookies’). We also employ so-called ‘third party cookies’ which are governed by third parties in order to offer specific services.
9. Google Analytics
This website makes use of Google Analytics, a web analysis service from Google Inc. (‘Google’). Google Analytics uses multiple ‘cookies’ (see above) to identify your browser. Information gathered through cookies about your use of this website is generally transferred to the Google server in the USA and saved there. We have, however, activated the IP anonymisation function on this website. This means that your IP address is abbreviated by Google within the member states of the European Union or in other contractual states for the agreement about the European Economic Area. Only in exceptional circumstances will a complete IP address be transferred to a server of Google in the USA and abbreviated there. Having been commissioned by the operator of this website, Google will use this information to evaluate your use of the website, to collate reports about website activities and to generate further services for the website operator that are linked with use of the website and internet. The IP address communicated by your browser via Google Analytics will not be merged with other data from Google. You can prevent Google’s acquisition of data generated by cookies and linked to your use of the website (including your IP address) as well as Google’s processing of this data, by downloading and installing the available browser plugin under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
10. Your rights
You have the right upon application to obtain free of charge information about personal data concerning you that has been saved. Additionally, you have the right to rectify incorrect data, the right to demand the restricted processing of data that has been too thoroughly processed, and the right to erase unlawfully processed personal data or personal data that has been stored for too long (to the extent that this is not countered by a legal obligation to preserve records or any other reason in accordance with Article 17 Section 3 of the GDPR). Furthermore, you have the right to transfer all data that you have committed to us in a common data format (right to data portability), to the extent that you have committed this data to us as part of a declaration of consent or in order to fulfill a contract.
Within the descriptions of each process we will outline the extent to which you also have the right to object to the processing of data in individual processes.
To exercise your rights simply send an email to email@example.com.
Furthermore, you also have the right to lodge a complaint with the supervisory authority. A list of the German and European data protection officers, as well as their contact information can be found under the following link: