Information about the collection of personal data
In the following, we will inform you about the collection of personal data when using our Website.
The collection, processing and the use of personal data are all subject to the provisions of the currently applicable laws and EU General Data Protection Regulation (GDPR). In accordance with Article 4(1) GDPR all information that relates to an identified or indefinable natural person are classed as personal data. This can be, for example, name, address, e-mail address, date of birth, nationality, profession, health data, religion, etc.
The Data Controller in the sense of Article 4(7) GDPR is the company Immersion7 GmbH, Hallstattstraße 16, 72766 Reutlingen-Mittelstadt, firstname.lastname@example.org. The company is represented by the Managing Directors Stefan Schönfeldt and Dr. Rainer Pollak. By clicking on the corresponding links, you can access the imprint with more detailed information.
When you contact Immersion7 by e-mail or by using the contact form, we will store the data provided by you (your e-mail address, your name and your telephone number, if applicable) in order to process your enquiries and to answer any follow-up questions you may have. These data will not be forwarded to third parties without your consent. The processing of these data takes place on the basis of point (a) of Article 6(1) GDPR. The data that is acquired within this context remain in our possession until such time as you tell us to delete it, you revoke the consent you provided for it to be saved or the purpose behind the processing of the data no longer applies or exists. Statutory retention obligations and other mandatory legal conditions remain unaffected by this.
If we rely on engaged service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective transactions. This will also entail the indicated criteria with respect to the duration that the data will be saved for.
With regard to your personal data, you have the following rights in relation to Immersion7 GmbH:
- right of access
- right to rectification or erasure
- right to restriction of processing
- right to object to processing
- right to data transferability.
You also have the right to submit complaints to data protection supervisory authorities concerning the processing of your personal data by Immersion7 GmbH.
Collection of personal data when visiting our Website
In case of a merely informative use of the Website, i.e. if you do not register or otherwise provide us with information, we will only collect the personal data that your browser transmits to our server. If you wish to view our Website we will collect the following data, which are technically necessary for us so that we are able to display our Website and ensure its stability and security (legal basis is point (f) of Article 6(1) GDPR):
- IP address
- data and time of the request
- time zone difference to Greenwich Mean Time (GMT)
- contents of the request (specific page)
- access status/HTTP status code
- transferred data volume
- website from which the request originates
- operating system and its interface
- language and version of the browser software
More functions and offers on our Website
Besides the use of our Website for mere information purposes, we offer different services that you can use in case of interest. To do so, you usually have to specify more personal data that we will use to render the relevant service and to which the data processing principles specified above apply.
To process your data, we sometimes make use of external service providers. These have been carefully selected and commissioned by us, they are bound to our instructions and checked at regular intervals.
Apart from that, we may forward your personal data to third parties if we offer the participation in campaigns, competitions, contract conclusions or similar services together with partners. More detailed information will be provided when you specify your personal data or at the bottom, in the description of the offer.
The processing of your data takes place on the basis of point (a) of Article 6(1) GDPR.
If our service providers or partners have their registered officer in a state outside the European Economic Area (EEA), we will inform you on the consequences thereof in the description of the offer.
SSL and/or TLS encryption
For security reasons and in order to protect confidential content such as orders or enquiries you send to us, a SSL and/or TLS encryption is used on this Website. You can recognise an encrypted connection by the address line on your browser changing from “http://” to “https://” and by the lock symbol that is then displayed in the browser line.
When the SSL and/or TLS encryption is active, the data that you provide to us cannot be read by third parties.
Objection to or withdrawal of your consent to the processing of your data
If you have provided us with a consent to the processing of your data, you may withdraw that consent at any time. Such withdrawal affects the lawfulness of the processing of your personal data after you declared it towards us.
Where we justify the processing of your personal data on the basis of a weighing of interests, you may submit an objection to the processing. This is the case if the processing is particularly not necessary to perform a contract with you, which is in each case shown by us in the following description of the functions. When exerting such right to objection, we ask you to explain the reasons why we should not process your personal data as it is done by us. In case of your justified objection, we will check the facts and either discontinue the data processing and/or adjust it or give you our compelling and legitimate grounds based on which we will continue the processing.
It goes without saying that you can object to the processing of your personal data for marketing and data analysis purposes at any time. You can inform us about your objection to marketing using the following contact data: Immersion7 GmbH, Hallstattstraße 16, 72766 Reutlingen-Mittelstadt, email@example.com.
In addition to the aforementioned data, cookies will be saved on your computer when you use our Website. Cookies are small text files on your hard drive that are assigned accordingly by the browser that you use, which allow the entity that places the cookie (in this case, Immersion7 GmbH) to then receive certain information. Cookies cannot run programmes or transmit viruses to your computer/digital device. Their purpose is to make the internet offering more user-friendly and effective overall. The legal basis for the processing of the data is point (f) of Article 6(1) GDPR.
This Website uses transient and persistent cookies. Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These store what is referred to as the “session ID”, with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognised if you return to our Website. Session cookies will be deleted as soon as you log out or close your browser. Persistent cookies are automatically deleted after a set period of time, which may differ depending on the cookie. You can delete the cookies in your browser’s security settings at any time.
Use of analysis programmes
In order to improve and design our products, internet offers and services so they do what they required to do, we collect statistical data about the usage behaviour. This does not entail the personal data being collected or provided to others in an anonymised or only pseudonymised form in compliance with the data protection provisions. The following solutions and technologies are used for this purpose.
This Website uses Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses “cookies”, which allow for an analysis of how this Website is used. The information generated by the cookie about your use of this Website is usually transmitted to a U.S.-based Google server and stored there. In case of activating IP anonymisation on websites, however, your IP address is first abbreviated by Google within EU member states or other states which are part of the EEA. Only in exceptional cases is the complete IP address transferred to a Google server in the USA and abbreviated there. On behalf of the operator of this Website, Google will use this information to assess your use of the Website, to compile reports about the Website activities and to perform other services connected to the use of the Website and of the internet on our behalf. The IP address transmitted by your browser in the context of Google Analytics will not be amalgamated with any other data from Google in the process. It is pointed out that this Website uses Google Analytics with the “anonymizelp()” extension and therefore only processes the abbreviated versions of IP addresses to prevent them from being directly linked to a particular individual. We use Google Analytics to analyse the use of our Website and to make regular improvements to it. With the statistics that we obtain, we can improve our offer and make it more interesting for you as the user. The legal basis for the use of Google Analytics is the first sentence of point (f) of Article 6(1) GDPR.
For the exceptional cases in which personal data is transferred to the USA, Google has agreed to comply with the EU-US Privacy Shield, https://www.privacy-shield.gov/EU-US-Framework.
By changing your browser settings accordingly, you can prevent cookies from being retained; please note, however, that you may possibly not have full access to all Website functions in this case. Furthermore, you can also prevent Google from collecting and processing the data generated by the cookie relating to the use of our Website (including the IP address) by downloading and installing the browser plug-in, which is available by using the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB.
You can also prevent the collection of your data by clicking on the following link. This entails placing an opt-out cookie which prevents the future collection of your data when visiting this Website: Deactivate Google Analytics.
Information of the third-party service provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Service: http://www.google.com/analytics/terms/gb.html, Overview of Data Protection: http://www.google.com/intl/de/Analytics/terms/learn/privacy.html, and data protection declaration: http://www.google.com/intl/de/policies/privacy.
We have concluded an agreement for contract data processing with Google, which will involve us fully implementing the strict regulations of German data protection authorities when using Google Analytics.
Using affilinet tracking cookies
In order to correctly collect sales and/or leads, this Website uses affilinet tracking cookies. This affilinet tracking cookie is set by the domain parner.webmaster-plan.com or banners.webmasterplan.com. affilinet tracking cookies do not save any personal data whatsoever, they only just save the ID of the conveying partner, as well as the order number of the advertising media that the user clicked on (banner, text link, among other things), which are required to complete the payment transaction. When concluding a transaction, the partner ID serves the purpose of being able to assign the commission to be paid to the conveying partner. The legal basis is point (f) of Article 6(1) GDPR.
This cookie corresponds with the respective valid data protection provisions. If you do not want this cookie to be saved, please deactivate the acceptance of cookies in the corresponding domains in your internet browser.
Plug-ins and tools
Embedding YouTube videos
Videos from the company YouTube, YouTube LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a company of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA are embedded on this Website, which are saved at http://www.youtube.com and can be played directly on our Website.
All videos have been integrated in the “enhanced data protection mode”, which means that no data about you as a user will be transferred to YouTube if you do not play the videos. The data stated in the following paragraph will only then be transferred when you play the videos. Immersion7 GmbH has no influence on this transmission.
When you visit the Website, YouTube receives information that you have accessed the relevant sub-page of our Website. Furthermore, under the headline “Collection of personal data when visiting our Website”, the data indicated in this declaration are conveyed. This happens regardless of whether YouTube provides a user account into which you are logged in or whether no user account exists. If you are logged into Google, your data will be assigned directly to your account. If you do not want the data to be associated with your YouTube profile, you must log out before activating the button. YouTube will store your data as user profiles and use it for the purposes of advertising, market research and/or the custom configuration of its Website. Data (including data of users who are not logged in) are for example evaluated in this way to provide custom advertising and to inform other users of the social network about your use of our Website. You have the right to object to the creation of such user profiles; if you intend to exercise this right, please contact YouTube.
YouTube is used to ensure a uniform and appealing presentation of our online offers. The legal basis is point (f) of Article 6(1) GDPR.
Further information on the purpose and scope of the data collection and its processing by YouTube is provided in YouTube’s data protection declaration. This also contains further information about your rights and your settings options for the protection of your private sphere: http://www.google.com/intl/de/policies/privacy. Google may process your personal data in the USA, and has agreed to comply with the EU-US Privacy Shield, https://www.privacy-shield.gov/EU-US-Framework.
On this Website, we use services by Google Maps. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). By using Google Maps, we are able to show you interactive maps as part of our Website and allow you to conveniently use the map function. The legal basis is point (f) of Article 6(1) GDPR.
When you visit our Website, Google receives information that you have accessed the relevant sub-page of our Website. Furthermore, irrespective of whether Google provides a user account that you log-in to or not, the data listed in the section Collection of personal data when visiting our Website. It is usually the case that this information is transferred to a Google server in the USA and stored there. We exercise no influence over the transferring of data. If you are logged into Google, your data will be assigned directly to your account. If you do not want the data to be associated with your Google profile, you must log out before activating the button. Google will store your data as user profiles and use it for the purposes of advertising, market research and/or the custom configuration of its website. Data (including data of users who are not logged in) are for example evaluated in this way to provide custom advertising and to inform other users of the social network about your use of our Website. You have the right to object to the creation of such user profiles; if you intend to exercise this right, please contact YouTube.
Further information on how Google uses user data as well as the data protection declaration are available via the following link: http://www.google.com/intl/de/policies/privacy.
We have concluded an agreement for contract data processing with Google, which will involve us fully implementing the strict regulations of German data protection authorities when using Google Maps.
Use of social media plug-ins
We are currently using the following social-media plug-ins: Facebook, Google+, Twitter, Xing, LinkedIn. We use the “two-click solution”. This means that when you visit our Website, no personal data will initially be passed on to the provider of the plug-ins. You will recognise the plug-in provider via the first letters of its name or its logo. We open up the possibility to you to communicate directly with the plug-in provider using the button. Only when you click on the corresponding logo does the plug-in provider receive the information that you have accessed the corresponding website or our online offer. Furthermore, data listed in the section Collection of personal data when visiting our Website are also conveyed. In the case of Facebook and Xing, once the information on the respective German provider is provided, the IP address will be anonymised immediately following collection. By activating the plug-ins, your personal data are conveyed to the respective plug-in providers and are saved there (in the USA in the case of the U.S. providers). Because the plug-in provider primarily collects data via cookies, we recommend deleting all cookies using your browser’s security settings before clicking on the button.
We have no influence on the data that is collected by or the data processing procedures, nor are we aware of the full scope of the data that is collected, the purposes of the processing or the durations of storage. There is no data available to us regarding the deletion of data by the plug-in provider.
The plug-in provider will save the data regarding your person as a user profile and use it for the purposes of advertising, market research and/or the custom configuration of its website. Data (including data of users who are not logged in) are for example evaluated in this way to provide custom advertising and to inform other users of the social network about your use of our Website. You have the right to object to the creation of such user profiles; if you intend to exercise this right, please contact the respective plug-in provider. With the plug-ins, we offer you the possibility to integrate with the social networks and other users, so that we can improve the services we offer and make the Website more interesting for you as user. The legal basis for the use of plug-ins is the first sentence of point (f) of Article 6(1) GDPR.
The passing-on of data takes place irrespective of whether you have an account with the respective plug-in provider and are logged in there. If you are logged-in with the respective plug-in provider, your data will be assigned directly to your account. If you press the active button and e.g. link the site, the plug-in provider also saves this information in their user account and make your contact data public. We recommend that you regularly log-out of a social network, in particular prior to activating the button because this will allow you to prevent an assignment of your profile by the plug-in provider.
Addresses of the respective plug-in provider and URL with their private policy information:
- Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304, USA; further data protection information available at: https://www.facebook.com/about/privacy/. Facebook may process your personal data in the USA, and has agreed to comply with the EU-US Privacy Shield, https://www.privacy-shield.gov/EU-US-Framework.
- Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; overview of data protection: http://www.google.com/intl/de/Analytics/terms/learn/privacy.html;data protection declaration: http://www.google.com/intl/de/policies/privacy. Google may process your personal data in the USA, and has agreed to comply with the EU-US Privacy Shield, https://www.privacy-shield.gov/EU-US-Framework.
- Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA: https://twitter.com/privacy. Twitter may process your personal data in the USA, and has agreed to comply with the EU-US Privacy Shield, https://www.privacy-shield.gov/EU-US-Framework.
- Xing AG, Gänsemarkt 43, 20354 Hamburg, Germany; http://www.xing.com/privacy.
- LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; https://www.linkedin.com/legal/privacy-policy. LinkedIn may process your personal data in the USA, and has agreed to comply with the EU-US Privacy Shield, https://www.privacy-shield.gov/EU-US-Framework.
Use of reCAPTCHA
We use the “reCAPTCHA” service from Google Inc. ,1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereafter “Google”, to protect the input form on our Website. By using this service you can differentiate between whether the entry is being made by a human or abusively using automated processing. The legal basis is point (f) of Article 6(1) GDPR.
As far as we are aware, the referrer URL, IP address, Website visitor behaviour, information about the operating system, browser and duration of the visit, cookies, display instructions and scripts, the user’s input behaviour and mouse movements in the “reCAPTCHA” check box area are transmitted to “Google”.
Google uses the information that it has obtained in this way to, among other things, digitalise books other print products and to improve services like Google Street View and Google Maps (e.g. to identify house numbers and street names).
The IP address transmitted in the context of “reCAPTCHA” is not associated with any other data by Google, unless you are logged into your Google account at the time of using the “reCAPTCHA” plug-in. If you want to prohibit the transfer and storage of data about you and your behaviour on our Website, you have to log out of “Google” and in fact do so before visiting our site or using the reCAPTCHA plug-in.
The information obtained by using the “reCAPTCHA” service is obtained in accordance with the Google Terms of Service: https://www.google.com/intl/de/policies/privacy/.
Newsletter / MailChimp
We offer you our newsletter as a further additional service. With this newsletter we would like to inform you about current developments within our company, new products, as well as events. The use the MailChimp services to distribute our newsletter. MailChimp is offered by The Rocket Science Group, LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30318, USA (“Rocket”)
The distribution of newsletters, among other things, can be organised and analysed by MailChimp. The data saved when registering the newsletter are transmitted to Rocket and are saved by Rocket on servers located in the USA. MailChimp may process your personal data in the USA, and has agreed to comply with the EU-US Privacy Shield, https://www.privacy-shield.gov/EU-US-Framework.
We were able to analyse our newsletter campaign with the help of MailChimp. Following registration, MailChimp sends you an e-mail to confirm registration. Furthermore, Mailchimp offers various analysis possibilities on how distributed newsletters can be opened and used, e.g. to how many users can an e-mail be sent, if e-mails are rejected and if a user de-registered themselves from the e-mail list after receiving the e-mail. If you open an e-mail sent to you using MailChimp, a file contained in the e-mail (a web beacon) links to the MailChimp servers located in the USA. This makes it possible to ascertain whether a newsletter notification was opened and, if yes, which link was clicked on. Furthermore, the collection of further technical information (e.g. IP address, time of accessing, operating system and type of browser). These analyses only apply to groups, however, they cannot be used for individual analyses and are exclusively for use in the statistical newsletter campaign. The results of these analyses can be used to improve the adaptation of future newsletters in the interests of the recipient.
The legal basis for the use of MailChimp is the first sentence of point (f) of Article 6(1) GDPR. You can revoke your ordering of the newsletter and your approval for your e-mail address to be saved at any time. The revocation can be notified to Immersion7 GmbH, Hallstattstraße 16, 72766 Reutlingen-Mittelstadt, in the form of a letter in text form via e-mail to firstname.lastname@example.org or by means of a link at the end of the newsletter.
We save the data saved by you for the newsletter until your de-registration for the newsletter. After you have cancelled the newsletter, the data will be deleted both from our servers, as well as the servers of MailChimp. Other data provided to us for other purposes will remain unaffected by this.
We have concluded a “Data Processing Agreement” with MailChimp, in which MailChimp pledges to protect our customers’ data and not to make it available to third parties. This agreement can be viewed by going to the following link: https://mailchimp.com/legal/forms/data-processing-agreements/sample-agreement/.
You can find more information on data protection at MailChimp here: http://mailchimp.com/legal/privacy/
Publication of job advertisements / online job applications
Your application data will be collected and stored by us using electronic means in order to carry out the application process. The legal basis for the data processing is point (a) of Article 6(1) GDPR. If your application is followed by conclusion of an employment contract, the data provided by you can be stored by us in your personnel file for purposes of the customary organisational and management process under compliance with pertinent legal provisions. The legal basis for the data processing is point (a) of Article 6(1) GDPR. If your application is rejected, the data provided by you is deleted automatically after two months after the rejection was communicated. This does not apply if storage for a longer period of time is required by law (for example burden of proof under the General Equal Treatment Act) or if you expressly agreed to storage in our prospective employee database for a longer period.
Data Protection Officer
If you have questions regarding the processing of your personal data, please contact our legally required Data Protection Officer directly, who is also available to handle requests for information, applications or complaints:
External Data Protection Officer