I. NAME OF THE PERSON RESPONSIBLE
The person responsible within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is the
II. GENERAL INFORMATION ABOUT THE COLLECTION AND PROCESSING OF YOUR DATA
1. Scope of processing
In principle, we process personal data only insofar as this is necessary to provide a functioning website and our content and services. The processing of personal data takes place regularly only with consent. An exception applies to cases in which prior consent can not be obtained for reasons of fact and the processing of the data is permitted by law.
2. Legal basis
The processing of your data is either based on your consent or in case the processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract, or based on legitimate interest, cf. GDPR art. 6(1)(a)-(b), (f).
If the processing is based on your consent, you may at any time withdraw your consent by contacting us using the contact information in clause 1.
3. Storage and deletion of your data
In principle, we only store personal data for as long as is necessary to fulfill contractual or legal obligations for which we collected the data. After that, we delete the data immediately, unless we still need the data until the expiry of the statutory limitation period for evidence purposes for claims under civil law or due to statutory retention obligations.
We delete or block the personal data of the data subject as soon as the purpose of the storage is fulfilled. It may also be stored if provided for by the European or national legislator in EU regulations, laws or regulations to which our company is subject (see details in sections 3.1-3.3). Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
3.1. Data Retention Policy
Due to tax regulations, Account Data will be retained for up to five full fiscal years from your cancellation of your Cookiebot account.
Configuration Data and System Generated Data will be erased immediately when you cancel the Cookiebot account.
End User Data will be erased on an ongoing basis after 12 months from registration, and immediately when you cancel the Cookiebot account.
3.2 Data Retention for Compliance with Legal Requirements
You may not require Usercentrics to change any of the default retention periods, except for the reasons for erasure pursuant to clause 3.3, but you may suggest changes for compliance with specific sector laws and regulations.
3.3 Data Restitution and/or Deletion
No data except AccountData will be retained after the termination of the Agreement. You may request a data copy before termination. You must not cancel the Cookiebot account until the data copy has been delivered, as Usercentrics will not otherwise be able to deliver the data copy.
III. PROVISION OF THE WEBSITE AND CREATION OF LOG FILES
1. Scope of data processing
Usercentrics processes personal data only if this is necessary to provide a functioning website and our content and services. The processing of personal data takes place regularly only with consent. An exception applies to cases in which prior consent can not be obtained for reasons of fact and the processing of the data is permitted by law.
Any of the information we collect from you may be used for one or more of the following purposes:
1.1. To personalize your experience (the information will help Usercentrics better respond to your individual needs);
1.2. To improve our website (Usercentrics continually strives to improve our website offerings based on the information and feedback we receive from you);
1.3. To establish a primary channel of communication with you;
1.4. To enable you to scan your website for trackers;
1.5. To enable you to talk to an expert.
2. Data processed
2.1 Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer. E.g. this is information like
– Information about the type and version of your internet browser,
– The operating system of your computer or smartphone,
– Your internet service provider,
– Your IP address,
– Date and time of your access,
– Geographic location,
– Websites from which you came to us,
– Websites that you visit from our site;
We collect such technical information in so-called “log files”, so that you can display our website correctly and we can identify the causes of any technical problems, for the technical optimization of our websites and for the purpose of the security of our computer systems and networks. For these purposes, the legal basis is legitimate interest in the processing of data according to GDPR art. 6(1)(f).
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. Typically, this technical information will be erased or rendered unrecognizable at the latest after seven days.
The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website.
2.2 Each time you use our Service to scan your website, your email address will be processed and definitions of the cookies found when the Service has scanned your website(s), including reports on the result of each scan.
