Data Privacy

For our website, we are using so called cookies at different locations. They help us make our services more customer friendly, effective and safe. Cookies are small text files that are saved on your computer by your browser. Most of the cookies we use are so called session cookies, which will automatically be deleted after the termination of your visit on our site. Cookies do not damage your computer and do not contain any viruses.

For example, language settings will be saved in the cookies and transmitted.

As part of the usage of technically necessary cookies, we will process your personal data in accordance with Art. 6 s. 1 lit. f GDPR.

Technically necessary cookies serve the purpose of designing  the website in a fitting way for you. Some functionalities of our website cannot be delivered without cookies. It is necessary that the browser will be identifiable even after a page change.

The user data gathered by technically necessary cookies will not be used to compile user profiles.

Cookies will be saved on your computer and only delivered to our website. Thus, you as the user have full control over the usage of cookies. By changing the settings of your internet browser, you can deactivate or restrict the delivery of cookies. Already saved cookies can always be deleted. This can be conducted automatically. If cookies are deactivated for our website, it is possible that not all services can be used to their full extent.

During the invocation of our website, a disclaimer will inform you about the usage of cookies and refer to this data protection declaration. Legal basis for the processing of personal data through cookies is Art. 6 s. 1 lit. f GDPR.

Usage of analysis cookies is conducted with the purpose of maintaining and improving the quality of our website and its contents.

In the cookie settings you can find more information about the cookies used.

Google Analytics

This website uses Google Analytics including the Google Analytics advertisement features. This is a web analysis service by Google Inc. ("Google"). Google Analytics uses so called „cookies“, text data that are saved on your computer and allow an analysis of your website usage.

Google Analytics is exclusively used with IP anonymization (so called IP-masking). This means that the IP address of a user is reduced and anonymized by Google in member states of the European Union or other states of the treaty of the European Economic Area (EEA). Only in exceptional cases, e.g. during technical outages in Europe, the full IP-address will be sent to a Google server in the United States and reduced and anonymized. For these exceptional cases, when personal data are sent to the US, Google adheres to the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework. Legal basis for the use of Google Analytics is art. 6 (1) s. 1 lit. f GDPR.

The IP anonymization method used by Google secures that the full IP-address is in no case saved on a harddrive, the full anonymization is conducted nearly directly after the request in the internal memory.

The provided IP-address will not be combined with other data gathered by Google.

Google uses these data on the website operator's order to analyze your use of the website, draft reports about website activities and conduct further services for the operator connected with the website and internet use, especially features for display advertisement and Google Analytics reports regarding the performance based on demographic characteristics and interests.

If necessary, Google will hand over these information sets to third parties, if legally required or if third parties process these data on Google's order. Personal data will in no case be delivered.

The Google Analytics reports about the performance according to demographic characteristics and interests, data gathered from interest-related advertisements by Google as well as user data from third party providers (such as age groups or interest groups) will be used.

In addition, this website uses Google remarketing functions. This is a service with which we would like to address you again when you are surfing on other websites. For this purpose, visitor behavior and interests are analyzed by the use of cookies. The analysis is basis for interest- or target group-related advertising. If you subsequently visit another website in the Google Display Network, you will receive advertisements that are highly likely to take into account previously accessed product and information categories.

You can deactivate the saving of cookies in the settings of your browser software; this will also limit the functionality of this website. Alternatively, you can install the following browser plug-in: http://tools.google.com/dlpage/gaoptout.

For more information about the terms of use or the privacy policy, please visit https://www.google.de/analytics/terms/de.html or https://www.google.de/intl/de/policies/.

Google Tag Manager

In addition, the service „Google Tag Manager“ is used for an improved administration of the previously named services. Google Tag Manager will neither gather additional personal data nor set additional cookies.

Google reCAPTCHA

We use „Google reCAPTCHA“ (hereafter: „reCAPTCHA“) on our website. Provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

With reCAPTCHA, it is possible to distinguish the data entry on our websites (e.g. a contact form) between real humans and automatic bots. For this, reCAPTCHA analyzes the behavior of the website visit based on various characteristics. This analysis automatically starts with access to the website. reCAPTCHA evaluates different information sets (e.g. IP-address, dwell time or tracking of mouse movements). Gathered data will be provided to Google.

These reCAPTCHA analyses are conducted without notifying the user beforehand.

Data processing is based on art. 6 s. 1 lit. f GDPR. The website operator holds a legitimate interest in protecting his web services from improper spying and spam.

Further information about Google reCAPTCHA as well as Google's data privacy policy can be found here: https://policies.google.com/privacy?hl=de and https://www.google.com/recaptcha/intro/android.html.

In order to provide individualized advertisements in the social media network LinkedIn and receive analyses of the user behavior on our website, we use the service "LinkedIn Insight Tag". This collects various data about the type and session time of the website visit by LinkedIn, solely collecting IP-addresses as personal data. This service is exclusively conducted for users that are registered users of LinkedIn.

On our website, we provide users with the opportunity to subscribe to a newsletter. The personal data gathered during the subscription process will be transmitted to us.

For this purpose, we collect the following data:

1. email address of the user for the delivery of the newsletter,
2. first and family name.

Additionally, the following data are automatically collected during the subscription:

1. IP address of the invoking processor,
2. date and time of the registration.

The newsletter is delivered via a provider based in the USA. The server location is in the EU. Although the server location is in the EU, it cannot be ruled out that the provider will be requested by US authorities to hand over the data stored there.

For the processing of data, we will ask for permission during the subscription and refer to this data protection declaration. For this purpose, you will receive a confirmation email with a link to activate your subscription (Double-Opt-In). You will be included into our newsletter distribution only after activating this link.

We will not proceed data to third parties in combination with the processing of personal data for the distribution of a newsletter. Collected data will exclusively be used for the distribution of the newsletter.

In case you subscribed to our newsletter and declared your agreement for the processing of your personal data,  Art. 6 s. 1 lit. a GDPR applies as legal basis.

The collection of your email address serves the purpose of distributing the newsletter to you. The collection of additional personal data during the subscription process serves the purposes of addressing you in a proper way and preventing a misuse of the services or the registered email address (IP address).

The data will be deleted once they are not necessary for the attainment of the purposes of their elicitation anymore. This means that your data will be saved for as long as the newsletter subscription is active. Should the activation email not be confirmed, all personal data will be deleted within seven days.

The subscription of the newsletter can always be deactivated by you. For this purpose, an Opt-Out link is included in each newsletter.

By cancelling your subscription, you can also make void your agreement for the usage of the personal data gathered during the subscription process. Your data will be deleted within 60 days after cancelling.

In case you acquire our products or services and send us your email address during this process, we are eligible to send you a promotional newsletter exclusively with direct promotion of similar products and services.

We will not proceed data to third parties in combination with the processing of personal data for the distribution of a newsletter. Collected data will exclusively be used for the distribution of the newsletter.

Legal basis for the distribution of a promotional newsletter as a result of a sale of products or services is § 7 s. 3 UWG, Gesetz gegen unlauteren Wettbewerb (German Fair Trade Law).

Gathering of your email address serves the purpose of delivering the promotional newsletter to you.

The data will be deleted once they are not necessary for the attainment of the purposes of their elicitation. This means that your data will be saved for as long as the newsletter subscription is active.

The subscription of the promotional newsletter can always be deactivated by you. For this purpose, an Opt-Out link is included in every newsletter.

On our website or via Social Media, we offer the opportunity to contact us or use one of our provided services. The personal data we collect in a webform during the contact or usage process will be delivered to us and saved. Services are for example: webinars, posters, guidelines, checklists, offers and further services with a high economic effort for us. We offer these services exclusively as services in return for the provision of the following data, allowing us to analyze these data and use them for sales and promotional activities:

• First name
• Family name
• Company
• Email
• Telephone number and
• Address
• Country

For more information on these recipients, please refer to 4.3 + 4.4. This includes the information about our products and services via newsletter (see 4.5), for which you can always opt-out. We also use these data to measure the popularity of services and to contact you regarding the contents of services, their technical functionality and updates.

On our website the following data are automatically collected during the registration, based on the double-opt-in method:

• IP address of the invoking processor,
• Date and time of registration.

Data will be sent to us via a webform and saved.

The data below will only be passed on to third parties if it is necessary for the provision of the service or for the display of personalized advertising on social media platforms (e.g. LinkedIn) and advertising platforms (e.g. Google Ads):

• First name
• Last name
• Company
• E-mail address
• Telephone number, if applicable
• Zip code, city
• Country
• Referrer, landing page

For webinars, data may be transmitted to the webinar service provider. The data privacy policy of the webinar service provider applies.

To allow us to provide you with a test version of BIC Platform, we ask you to confirm our terms of use, the general terms and conditions, this data privacy policy and the contract for contract data processing.

Your registration is necessary for the provision of certain contents and services, to fulfill the purpose of your request, e.g. sending a document, invite you to a webinar or event and send you further information regarding a webinar or event, or to send an offer or further marketing information.

If the registration on our website or via social media serves the purpose of the fulfillment of contractual duties, e.g. registration for a free trial version of the BIC Platform, quality content, webinars or other services, for which you are one contracting party or for the execution of pre-contractual measures, additional legal basis for processing of your data is Art. 6 s. 1 lit. b GDPR.

Your registration is necessary for the fulfillment of a contract or for the execution of pre-contractual measures.

For this, we need the following data:

• First and family name,
• Company,
• Address,
• Telephone number,
• Email address (for the distribution of information about BIC products as well as access data and for offer or contract information)
• Country

This data is transferred to our CRM tool for efficient initiation of the customer relationship, documentation of the pre-contractual consultation and the exchange of services described above. If applicable, we will transfer applications and registrations from outside Germany, Austria or Switzerland to the responsible subsidiaries of GBTEC to process the request and fulfill contractual duties.

As a user you always have the right and possibility to have your personal data deleted or revised. For this, please contact our data protection coordinator via datenschutz@gbtec.com.

Should personal data be necessary for the fulfillment of a contract or for the execution of pre-contractual measures, a deletion is only possible if no contractual or legal duties to save these data apply.

On our website, we supply users with a contact form for means of making electronic contact. Given the case, you use this form for contacting us, the personal data inserted into the form by you will be transmitted to us and saved. These data are:

• Salutation and title,
• first and family name,
• email address,
• if applicable, further personal data inserted into the text form by you.
   

For processing of your data, we will ask for your permission during the transmission process and refer to this data protection declaration.

Processing of personal data inserted into the text form only serves us to process the contact. In the case of contact by email, the necessary justified interest in processing of data lies herein. Additional personal data processed during the transmission serves the purpose of preventing misuse of the contact form and securing the safety of our information technology systems.

Alternatively, you can directly contact us by sending an email to the provided email address.

Legal basis for processing the personal data that you transmit to us by email is Art. 6 s. 1 lit. f GDPR. If, in the course of email contact between you and us, the conclusion of a contract is targeted, additional legal basis for processing data is Art. 6 s. 1 lit. b GDPR.

If applicable, we will transfer contact requests from outside Germany to the responsible subsidiaries of GBTEC to process the request and fulfill contractual duties.

The data will be deleted once they are not necessary for the attainment of the purposes of their elicitation anymore. For data collected in the contact form, this is the case once the conversation between you and us is terminated, meaning that the discussed issue in the conversation is resolved. Personal data collected during the transmission process will be deleted after seven days latest.

You as a user always have the right and possibility to enter an objection against our data processing. By contacting us by email, you can always disagree with the saving of your personal data. In this case, we will instantly discontinue the conversation.

A revocation must be sent to: datenschutz@gbtec.com. All personal data saved during the process of contact and conversation will be deleted after you revoked your agreement to data processing.

GBTEC offers a learning platform for customers, partners, and interested parties, in which knowledge is provided in the form of e-learnings on the topics of business process management, quality management, and digitalization, as well as trainings on GBTEC products in free and fee-based form.
The following information describes how your personal data is stored and processed when you use the GBTEC Academy e-learning platform.
When you register for the GBTEC Academy e-learning platform at academy.gbtec.com, the following data will be stored by GBTEC:

• First name
• Last name
• Company
• E-mail address
• IP address
• Your Comments
• Courses and learning progress

Data is only passed on to third parties if it is necessary for the provision of the service. The data is processed for service provision by

• Service provider of the e-learning platform located in Canada (adequacy decision of the EU Commission).
• Cloud service provider - transfer of personal data to a server in the USA.

Registration on the website is necessary for the provision of content and services, as well as to communicate with you to fulfill the purpose of the request.
Registration is possible only by agreeing to the GBTEC Academy Terms of Use. According to the Terms of Use for the e-learning platform, you will receive information about our products and services via newsletter. For this purpose, the data is stored in our CRM system. Thus, the processing takes place according to Article 6(1)(b) GDPR for the fulfillment of the contract.
As a user, you have the option at any time to have the data stored in the e-learning platform deleted or rectified. To do so, please contact our data protection coordinator at datenschutz@gbtec.com. In addition, you can unsubscribe from the newsletter independently at any time.

You want to apply for a job with us? We look forward to receiving your application by email or via our online application form.

In the process of application management, we process the data that you transmitted to us in the aim to initiate a tenure based on Art. 88 GDPR IAW § 26 s. 1 BDSG. or to decide whether we conclude an employment contract with you and how its contractual details are structured (contract initiation according to Art. 6 s. 1 lit. b GDPR).

The processing of your application for a position in the DACH region as well as the UK and USA is generally centralised in Bochum (at GBTEC Software S.L. this is done directly by the company). From there, your application will be disclosed for a limited period of time to the team leaders/managers who essentially decide on the staffing. 

Depending on the constellation (e.g. place of employment, location of the responsible manager), data may be transferred to another group company. This serves internal group organisational and administrative purposes (Art. 6 s. 1 f GDPR in conjunction with recital 48). Should special categories of personal data be processed (e.g. disability), this is based on Art. 88 GDPR IAW § 26 s. 3 BDSG. Additionally, processing of health data may be necessary according to Art. 9 s. 2 h) IAW § 22 s. 1 b) BDSG.

For the efficient processing of the job application process, we use the application of Personio GmbH, Rundfunkplatz 4, 80335 Munich (in the following: Personio). Personio is a webservice directly embedded in our website. By clicking on a job advertisement on our website, you will be directly referred to a Personio web form. Your personal data and the documents submitted there are transmitted in encrypted form to Personio's servers, where only Personio has access to your data. 

During your visit of our job advertisements, personal access data will automatically be gathered, such as:

• Traffic source,
• http requests and answers,
• cookies, including tracking cookies, session times and dwell time,
• link to and data from LinkedIn/Xing profile,
• further personal data required for the use of the form and further processing (applicant data, contact data).

Collection of personal data and the integration of Personio during the visit of job advertisements as well as the related processing of data is necessary to monitor and improve the recruiting and the website performance, based on our legitimate interest in efficiently designing our internal procedures and services, art. 6 s. 1 lit. f GDPR.

We process and save personal data for as long as it is necessary due to fulfillment of data processing or legal, contractual or statutory obligations. Hereafter, data will be deleted, or their processing will be restricted. In the case that no employment relationship comes into force, we will delete your data within 6 months after completing the application process. Should we be interested in saving your application in a so called „pool of applicants“ for a period longer than six months, we will ask for your permission before expiration of the six months deadline.

You can always withdraw your application. In this case, your application and the data provided in the web form will be deleted. Only the implementation of the deletion is documented for the purpose of proving the implementation of internal data protection processes. A revocation must be sent to: datenschutz@gbtec.com. Revocation of any consent given to the "applicant pool" is also always possible.

We use the analysis tool Mouseflow from Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, on our website to improve user-friendliness and the visitor experience on our website. The service collects data on the behavior and impact of the website on visitors by tracking mouse / cursor movements. The legal basis for the processing of personal data is your consent in accordance with Art. 6 s. 1 lit. a GDPR, which you have given on our website. You can withdraw your consent at any time. 

Personal data is also transferred to the USA (Mouseflow has servers there). With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR. The operator of the service is certified under the DPF, so that the usual level of protection of the GDPR applies to the transfer.

This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.

In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally.

The data stored by Salesviewer® will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.

The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on https://www.salesviewer.com/opt-out in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.

GBTEC Software AG will not share your personal data with third parties, except as required for settling business transactions.

In some cases, our own data processing is carried out by external service providers, engaged by us to process data for us based on our instructions.

If these service providers are in Germany we require such service providers to give written undertakings in accordance with the strict regulations of the GDPR and they may not use the data for any other purposes.

By using BIC products or entering your data on the website of GBTEC Software AG, it may be possible - according to the use of BIC, depending on the server address determined by agreement between you and us - to transfer personal data to an unsafe third country (e.g. USA).
In this regard, we exclusively cooperate with subcontractors who are certified according to DIN / ISO standard 27001.
The data transmission is always based on EU standard contract clauses agreed between GBTEC Software AG and the subcontractor. Furthermore, we want our subcontractors - if they are in the USA - to have a Privacy Shield certification.

However, we would like to point out that we can offer BIC products completely and exclusively within the EU or Germany, if desired.

If you are using BIC products and need further information about the software, we will be glad to provide your data protection officer – after a written request to sales@gbtec.com – a protected list of our subcontractors by email. The list contains the name and address of all subcontractors as well as a brief description of all provided services. We will inform you about further changes in the list (e.g. substitution of the subcontractor) by email. Your company data protection officer is also entitled to receive information about essential data protection-relevant terms and conditions of our subcontractors by written request, if you use BIC products.

The data transmitted is limited to the minimum required.

GBTEC Software AG also forms partnerships with other companies to be able to provide joint products and services. If you purchase such products or services, or expressly state an interest in receiving further information about them, GBTEC Software AG may pass the data provided during a purchase/rental or expression of interest to its business partners. It is not within the scope of responsibility of GBTEC Software AG to monitor the use of your data by our business partners. The use of such data, moreover, is subject to the data protection policy of the respective partners. If you do not wish your data to be passed on in this way, you may decide not to use jointly offered products and services, or expressly state that you are not interested in receiving further information.

To the extent that GBTEC Software AG is obligated to disclose your data by law or by a judicial decision, we will only pass on your data to governmental institutions and official authorities entitled to receive such information.