Privacy Policy

We are responsible for the processing of your data:
aixACCT Systems GmbH
Directors: Stephan Tiedke, Thorsten Schmitz‐Kempen
Talbotstr. 25
52068 Aachen
Germany
Tel.: +49 (0)241 47 57 03 0
Fax: +49 (0)241 47 57 03 66
email: info@www.aixacct.com

You can reach our data protection officer by post at our address (see above).

If you visit our online presences (e.g., our website or our social media profiles), e.g., as an interested party, customer, supplier, service provider or other visitor, your personal data will be processed within the framework of the statutory provisions or this policy. All visitors to our online presence are grouped together under the term “users”.

If you visit our online presences without registering or otherwise transmitting information to us, only the personal data transmitted to our server by the browser you use will be processed.  To the best of our knowledge, processing covers the following data, which is technically necessary to display our online presence and to ensure its stability and security:

• Accessing computer’s IP address;
• Date and time of the request;
• Name and URL of the retrieved file;
• Access status/HTTP status code;
• the amount of data transferred;
• website from which the request comes (referrer URL);
• Browser used;
• Operating system.

If you also send us personal data, e.g. in the context of an email enquiry, we may also process the following data, among others:

• Inventory data (e.g., name, address);
• Contact details (e.g., email address, telephone number);
• Content data (e.g., text input);
• Usage data (e.g., sites visited);
• Communication/metadata (e.g., IP addresses).

We also process the following personal data for the purposes of providing contractual services, service and customer care as well as marketing/advertising, if you provide it:

• where applicable, contract data (e.g., contractual object, customer number)
• where applicable, payment data (e.g., bank details)

We process your personal data when you visit our online presence for the following purposes:

• Provision of the functions and contents of our online offer;
• Ensuring a smooth connection to our website;
• Ensuring a comfortable use of our website
• Evaluating and ensuring system security and stability and general security measures;
• Answering any contact requests or communicating with you;
• Other administrative purposes Provision of contractual services
• Customer service;
• Marketing / Advertising.

Unless we specify a specific legal basis within this privacy policy, the following applies to the processing of your personal data: The legal basis for obtaining consent is Art. 6(1)(a), Art. 7 GDPR.  The legal basis for data processing for the provision of our services and the implementation of (pre-) contractual measures as well as for the purpose of responding to any enquiries is Art. 6(1)(b) GDPR.  The legal basis for data processing for the fulfilment of legal obligations is Art. 6(1)(c) GDPR. Where vital interests of the data subject or another natural person renders data processing necessary, the legal basis is Art. 6(1)(d) GDPR.  Data processing to protect our legitimate interests is based on Art. 6(1)(f) GDPR. Our legitimate interest in this regard follows from the above-mentioned purposes of data collection.

If, in the course of processing your personal data, we disclose it to third parties, transfer it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission, where you have consented to this, we are legally obliged to do so or on the basis of our legitimate interests. Legal permission exists in particular where the transfer of data is necessary for the fulfilment of contractual obligations (e.g., in the case of payment or shipping service providers).  A legitimate interest may exist if we use data for direct marketing or to prevent fraud, or even if you are a customer of ours. A legitimate interest may also exist, for example, in the use of web or email hosts, cloud providers or other service providers.    Such service providers often act as so-called processors on the basis of a corresponding contract. They are also obliged to comply with data protection requirements and to guarantee this contractually. The legal basis for such order processing relationships is Art. 28 GDPR.

Unless otherwise stated in the privacy policy, we regularly work with the following recipients in particular:

• Email hosting providers;
• Web hosting providers;
• Banks;
• Shipping service provider

We select external service providers carefully.  Regarding order processing relationships (Art. 28 GDPR), these companies are contractually bound to our instructions, and we monitor them regularly.  There are corresponding contractual bases with regard to joint responsibility (Art. 26 GDPR). More detailed information can be found in the following descriptions of the individual services.

The legal basis for the transfer of your personal data is stated above under point 04.

There are no plans to transfer your personal data to third countries (i.e., outside the EU or EEA) or to an international organization.

The duration of the storage of your personal data is lawfully determined in line with existing legal retention periods (e.g., according to commercial or tax law).  Unless otherwise stated below, your personal data will be routinely deleted after the expiry of any relevant period, provided that it is no longer required for the performance or initiation of the contract, we no longer have a legitimate interest in continuing to store it and/or you have not consented to its storage beyond this period.

In Germany, there are special retention periods in the following areas, among others:

• Under commercial law (6 years e.g., for opening balance sheets, annual accounts, accounting vouchers or similar).
• under tax law (10 years for all documents relevant under tax law)
• under labor law (e.g., 6 months for documents of rejected applicants)

You have the following rights with regard to the processing of your personal data:

• Right of access (Art. 15 GDPR);
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR);
• Right to data portability (Art. 20 GDPR).
• Right to object (Art. 21 GDPR)
• Right to withdrawal of consent given (Art. 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

The latter 3 rights are explained in more detail below. If you have any questions about your rights, please do not hesitate to contact us. The contact details can be found above in the sections concerning the controller.

Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(1)(f) GDPR, you have the right to object to the data processing at any time. This means that we may no longer process your personal data in the future, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the data processing the processing is for the establishment, exercise or defense of legal claims.

However, the right to object only applies if there are grounds for doing so that arise from your particular situation or if your objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.

Sending us a letter to our postal address or an email (see above under point 01) will suffice should you wish to exercise your right of objection.

You can withdraw any consent you have given to us at any time. Such a withdrawal will cause us to cease prospectively processing your personal data based on this consent.
Sending us a letter to our postal address or an email (see above under point 01) will suffice should you wish to exercise your right of withdrawal.

You have the right to lodge a complaint with a data protection supervisory authority in relation to our processing of your personal data.  A list of the German data protection supervisory authorities can be found at the following address:

www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links‐node.html

You provide us with your personal data (e.g., name or email address) in the context of support or other enquiries.

The provision of your personal data is partly required by law (e.g., by tax law regulations). It may also be necessary for the implementation of (pre-) contractual measures. Failure to provide your personal data would mean that the contract with you could not be concluded or that your enquiry could not be answered.

The provision of the following data in particular is mandatory for the implementation of contracts or pre-contractual measures or for communication with us:

• Name;
• Email address;
• Telephone number, where applicable (e.g., for queries or responding to customer enquiries).
• Customer number, where applicable (e.g., for support activities)

Unless otherwise stated in this privacy policy, all other information is voluntary.

There is no automated decision-making including profiling.

You can contact us by post, telephone or email, for example. Our contact details can be found above in the section concerning the controller’s details.

If you contact us, e.g., by email or via the contact form, we automatically save the personal data you voluntarily provide to us for the purpose of processing your enquiry or contacting you. This data will not be passed on to third parties.

Taking into account the state of the art, implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of protection appropriate to the risk (Article 32 GDPR). These measures include, in particular, ensuring the confidentiality, integrity and availability of data. We have also established business processes at our company that ensure, in particular, the protection of data subjects’ rights, the deletion of data and also the response to data breaches. We also observe the principles of data protection law, including data protection through technology design and through data protection-friendly default settings (privacy by design and privacy by default, Art. 25 GDPR).

For security reasons and to protect the transmission of your personal data and other confidential content, we use encrypted transmission via SSL / TLS certificate on our website. You can recognize this by the fact that “https” (instead of “http”) appears in the address line of your browser, as well as a lock symbol and a different color display.

We use so-called cookies on our website. These are small text files that are saved by your browser and stored on your terminal device.

The so-called transient (or temporary) cookies are automatically deleted when you close your browser. These include session cookies in particular. These store a certain identifier (the so-called session ID), which makes it possible to recognize your terminal device when you return to our website. This can be used, for example, to save the contents of the virtual shopping basket of an online shop or the login status. Session cookies will be deleted when you log out or close the browser.

The so-called persistent (or permanent) cookies are automatically deleted after a certain period of time; the duration of storage differs depending on the cookie. This can, for example, store user information for reach measurement or marketing purposes or even a login status for a longer period of time.

A distinction must be made between first-party cookies and third-party cookies for both temporary and permanent cookies.  The former are set by the controller, the latter by third-party providers.

You can delete cookies at any time via the security settings in your browser or, for example, also refuse to accept third-party cookies.  If you generally want to object to the use of cookies for online marketing purposes, you can do so through various services or providers, e.g., via the American site www.aboutads.info/choices or the European site www.youronlinechoices.com. Please note that you may then not be able to use all the functions of our website.

On our website, we may use temporary or permanent cookies, as well as first and third-party cookies, e.g. to be able to identify you for subsequent visits if you have an account with us (otherwise you would have to log in again for each visit).  You can find further information about this in our privacy policy where applicable.

We only use cookies that are technically necessary for the operation of our website. The legal basis for the use of cookies is Art. 6(1)(1)(f) GDPR.

Where necessary, we also place job advertisements on our website, which can be answered electronically (i.e., by email or through PDF files); we also accept unsolicited applications. Applicants’ data will be processed electronically for the purpose of handling the application procedure.  This application data includes, in particular, name, address, telephone number, email address, date of birth, educational information or even grades.

Where an application results in the conclusion of an employment contract, the application data may be stored for the usual organizational and administrative process of the respective personnel file.  Otherwise, i.e., where applicants are unsuccessful, the application data will be deleted 6 months after notification of rejection. This applies in any case if there are no specific legal requirements to the contrary or the respective applicant has expressly consented to a longer storage of their application data.

We operate the profiles listed below in social networks in order to be able to contact the users active there and to inform them about our services there. The respective terms and conditions as well as the data protection information of the respective operators apply when the respective networks are accessed.  Unless otherwise stated in our privacy policy, we only process users’ data if they contact us within the social networks, e.g. by posting on our profile pages or sending us messages. Our social media profiles:

• LinkedIn DATA PROTECTION GUIDELINES