We are pleased about your use of our website. The protection of your personal data is important to us and we want you to feel safe when using our website.

1. Information concerning the collection of personal data

(1) The following shall inform you about the collection, processing and utilization of personal data on our website. Personal data means all data relating to a living individual who can be identified.

(2) Controller as per the EU General Data Protection Regulation (GDPR) is:

a-tune software AG
Julius-Reiber-Str. 15
64293 Darmstadt
Germany

You can reach our data protection officer by contacting us via email at a-tune data privacy or by sending us a letter addressed to “Data Protection Officer”.

(3) If we use contracted service providers for individual functions to present our services to you or to your data for advertising purposes, we will inform you in detail about the respective processes below.

2. Your rights as a data subject

(1) You have the following rights against us with respect to the personal data concerning you:

  • Right of access by the data subject (Art. 15 GDPR): You have the right to request information on the data we hold about you from us at any time. This information includes, but is not limited to, the categories of data we process, the purposes for which it is processed, the source of the data if not collected directly from you, and, if applicable, the recipients with whom we have shared your data. You can obtain a copy of your data from us free of charge. If you require additional copies, we reserve the right to charge you for these copies;
  • Right to rectification (Art. 16 GDPR): You have the right to request that we rectify inaccurate data relating to you. We will take appropriate steps to keep the data we store and process on an ongoing basis accurate, complete and current, based on the most up-to-date information available;
  • Right to erasure (Art. 17 GDPR): You have the right to demand the deletion of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
  • Right to restriction of processing (Art. 18 GDPR): You have the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, if the processing is unlawful but you refuse to have it deleted and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or if you have lodged an objection to the processing pursuant to Art. 21 GDPR;
  • Right to data portability (Art. 20 GDPR): You have the right to request that we transfer your data – if technically possible – to another responsible party. However, you may only enforce this right if data processing is based on your consent or is necessary for the performance of a contract. Rather than receiving a copy of your data, you may also ask us to submit the data directly to another responsible party specified by you.
  • Right to object (Art. 21 GDPR): You have the right to object to the processing of your data at any time for reasons that arise from your particular situation, as long as data processing is based on your consent, on our legitimate interests or those of a third party. In this case, we will cease to process your data. This does not apply if we can show that there are compelling legitimate grounds for processing that outweigh your interests, or if we need your data for the establishment, exercise or defence of legal claims.
  • Right to withdraw consent (Art. 7 (3) GDPR): You have the right to revoke your consent to us at any time. As a result, we are not allowed to continue the data processing that was based on this consent in the future.

(2) Inquiries regarding your rights as a data subject you can direct to us under the contact details mentioned under §1 or by post to the controller’s postal address.

(3) If you have the feeling we have not responded in an appropriate manner to your complaints or you have further concerns, you additionally have the right to complain to a data protection authority. The responsible authority to us is the “Hessische Beauftragte für Datenschutz und Informationsfreiheit“: http://www.datenschutz.hessen.de.

3. Collection of personal data when visiting our website

(1) If you use the website simply for informational purposes, i.e. if you do not register yourself or send us any information, we collect only the personal data which your browser sends to our server. If you wish to view our website, we collect the following technical data which we need to enable us to show you our website and ensure stability and security (the legal basis is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR):

  • IP address
  • Date and time of the query
  • Time zone difference relative to Greenwich Mean Time (GMT)
  • Content of the query (specific site)
  • Access status/HTTP status code
  • Data volume transmitted in each case
  • Website from which the request emanates
  • Browser
  • Operating system and its user interface
  • Language and version of the browser software

The data mentioned above gets processed for the following purposes:

  • To ensure a smooth connection of the website,
  • Guarantee a comfortable use of our website,
  • Evaluation of system security and stability as well as for other administrative purposes.

This information is temporarily stored in so-called log files. This information is recorded without your intervention and stored until it is automatically deleted.

4. Cookies

(1) In addition to the previously mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive associated with the browser you are using and through which the body that sets the cookie (here by us), certain information flows. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offer as a whole more user-friendly and effective.

(2) Types of cookies
This website uses the following types of cookies, the scope and functionality of which are explained below:

  • Transient cookies (for this purpose a)
  • Persistent cookies (in addition b).

a) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website, for example, to prevent you from having to log in again each time you change pages. Session cookies are deleted when you log out or close the browser.

b) Persistent cookies are deleted automatically after a specified duration, which may differ depending on the cookie. How long the cookie remains on your device depends on the duration or expiration date of the respective cookie and your browser settings. You can delete the cookies at any time in the security settings of your browser. These cookies allow the website to remember your information and settings the next time you visit. This gives you faster and more convenient access to the website, as you do not have to set your language preference again, for example.

(3) We use cookies either on the basis of our legitimate interests (Technically Necessary Cookies) or on the basis of your consent (Optional Cookies), according to your selection of the cookie banner displayed when you access the website. You can also configure your browser setting according to your preferences and, for example, refuse to accept third-party cookies or all cookies. This may result in a functional restriction of our offers.

Change cookie settings

5. Recipients or categories of recipients of personal data

(1) Within the scope of our activities and services, it may become necessary for us to disclose the personal data stored about you to natural persons, legal entities or public authorities. We conclude contracts with our service providers, which ensure that they may only process your personal data in a way that we have explicitly instructed them to do so. Furthermore, we ensure that they take the necessary technical and organizational measures to process your data securely and store your personal data only as long as necessary. External service providers who may receive personal data generally fall into the following categories of recipients:

  • Credit institutions and providers of payment services for billing and payment processing (online payment providers)
  • Parcel Shipper
  • IT service provider to maintain our IT infrastructure
  • Cloud provider
  • Service provider for the optimization of the online offer
  • Collection service providers or lawyers to collect receivables and enforce claims in court. If, in the event of a collection case, personal data (customer and contact data, payment and consumption data and data on the claim) is transferred to a collection service provider, we will inform you in advance about the intended transfer.

(2) If data is processed in countries outside the European Union or the EWR, we will ensure that your personal data is processed in accordance with the European data protection level. In the absence of a decision by the EU Commission, we only transfer data to service providers from third countries that offer suitable guarantees in accordance with Art. 46 GDPR (usually EU Standard Contract Clauses). In cases where this cannot be ensured even through this contractual extension, we endeavor to obtain additional regulations and commitments from the data recipient.

6. Contact and contact form (HubSpot/ HubSpot forms)

(1) When you contact us (e.g. by e-mail or via the contact form), the information you provide will be processed for the purpose of processing the inquiry and in the event that follow-up questions arise. The contact form is an additional service to enable you to contact us quickly and easily.

(2) To provide the forms, we use the services of the software manufacturer HubSpot. HubSpot is a software company from the USA with a branch in Ireland (HubSpot European Headquarters, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland). On our website, we use the HubSpot and HubSpot Forms service provided by HubSpot Inc, 25 First Street, 2nd Floor, Cambridge, MA 02141, USA. HubSpot is an integrated software solution that can be used to cover various online marketing activities. This includes, for example, our website content management, e-mail marketing, social media publishing & reporting, contact management, as well as the provision of any landing pages and contact forms. When you use our contact form, we collect the following data

  • First name
  • Last name
  • Organization
  • Job title
  • Telephone
  • E-mail
  • Product or feature of interest

You can find out in detail which data HubSpot collects in addition to the data you enter in the provider’s privacy policy.

(3) We have concluded a data processing agreement with HubSpot, which refers to so-called standard contractual clauses (Art. 46 (2) and (3) GDPR). These are provided by the EU Commission and ensure that the level of data protection in the third country corresponds approximately to the European standard. The Data Processing Agreement with HubSpot can be accessed here.

(4) If we use the services of HubSpot to fulfill our contractual obligations or to take pre-contractual measures such as responding to contact requests, data processing is based on the legal basis of Art. 6 para. 1 sentence 1 lit. b) GDPR. In all other cases, the processing of the data is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. Otherwise, we base our data processing via HubSpot on Art. 6 para. 1 sentence 1 lit. f) GDPR due to our legitimate interest in optimized contact management.

(5) The personal data stored in the context of contacting us will be deleted when the matter associated with the contact has been fully clarified and it is not to be expected that the specific contact will be relevant again in the future. In addition, we will only store your data if this is necessary to comply with statutory retention periods.

7. Social Media, portals

(1) We are represented in the social networks and employer evaluation portals mentioned below. These presences are operated exclusively by the respective provider. They serve to communicate directly with customers, interested parties and users. If you contact us via our social media channels, we process the data that you provide us with as well as the data that is necessary to process your request (Art. 6 para. 1 letter b GDPR). Insofar as you have given your consent to the operators of the respective social media platforms (e.g. by means of a checkbox opt-in), the processing is carried out on the basis of Art. 6 para. 1 a GDPR. You can revoke your consent at any time with the operator of the respective platform with effect for the future.

(2) When you visit our social media pages, your user data is recorded and provided to us by the operator. The exact types of data differ from provider to provider, but generally include the following information:

  • Follower: number and stored profiles; information about growth and development over a defined time frame.
  • Reach: number of people who see a specific contribution; number of interactions with a contribution. From this, it can be deduced, for example, which content is better received by the community than others.
  • Ad performance: How many people were reached by a contribution or a paid ad and have interacted with it?
  • Demographics: Average age of visitors, gender, location, language.

(3) Since our social media channels are operated by the providers of the respective social network, there may be a supplementary use of your personal data by the respective operator, over which we have no influence. This often involves the recording of your IP address, the creation of static evaluations and the processing of further information stored in the form of cookies. We have no influence on the generation and presentation of this data and can neither turn off this function nor prevent the processing of the data.

(4) The assertion of data subject rights and requests can most effectively be addressed directly to the platform providers, since only they have access to your data and can take immediate action and provide information. Should our cooperation be necessary for this, we will support you in enforcing your rights as a data subject.

(5) More detailed information about the terms of use of the respective platform as well as a detailed description of further data processing and the respective possibilities of objection can be found on the pages of the providers under:

LinkedIn (LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland): https://www.linkedin.com/legal/privacy-policy.

Xing (New Work SE, Dammtorstraße 30, 20354 Hamburg, Deutschland): https://privacy.xing.com/de/datenschutzerklaerung/allgemeine-hinweise.

8. Friendly Captcha

Our website uses the service “Friendly Captcha” (www.friendlycaptcha.com). This service is an offer of Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany. Friendly Captcha is a novel, privacy-friendly protection solution to make it more difficult for automated programs and scripts (so-called “bots”) to use our website.

For this purpose, we have integrated a program code from Friendly Captcha into our website (e.g. for contact forms), so that the visitor’s terminal device can establish a connection to Friendly Captcha’s servers in order to receive a calculation task from Friendly Captcha. The visitor’s terminal solves the calculation task, which takes up certain system resources, and sends the calculation result to our web server. The server contacts the Friendly Captcha server via an interface and receives a response indicating whether the puzzle was solved correctly by the end device. Depending on the result, we can apply security rules to requests via our website and thus, for example, process or reject them.

The data is used exclusively for the protection against spam and bots described above. Friendly Captcha does not set or read cookies on the visitor’s terminal device. IP addresses are only stored in hashed (one-way encrypted) form and do not allow us and Friendly Captcha to draw any conclusions about an individual person.

If personal data is collected, it will be deleted after 30 days at the latest.

The legal basis for the processing is our legitimate interests in protecting our website against abusive access by bots, i.e. spam protection and protection against attacks (e.g. mass requests), Art. 6 (1) lit. f GDPR.

Further information on data protection when using Friendly Captcha can be found at https://friendlycaptcha.com/legal/privacy-end-users/. Further information on Friendly Captcha’s Terms can be found at https://friendlycaptcha.com/legal/terms/.

9. Data protection information for competitions and promotions

Occasionally, a-tune software AG organizes competitions and promotions in which customers and interested parties can participate. We would like to inform you below about the processing of your personal data in connection with these sweepstakes and promotions in accordance with Art 13 GDPR.

(1) When you participate in a contest or promotion, we process the data and information you provide in the registration form. This includes the data required for participation such as:

  • name and surname,
  • organization,
  • e-mail-address

as well as, if applicable, the data and information voluntarily provided by you in the course of participation.

(2) Your personal data is processed for the purpose of handling the competition or promotion, in particular for determining and notifying the winners.

For the purpose of sending and delivering prizes, we may subsequently collect and process further data, e.g. your postal address.

(3) The legal basis for the processing is the fulfillment of the contractual relationship existing through participation in the competition (Art. 6 para. 1 sentence 1 lit. b GDPR).

(4) You can object to the processing of your data at any time. To do so, send a message to a-tune data privacy.

We would like to point out that in the event of an objection, further participation in the competition or the promotion is excluded.

(5) The processed data will be deleted after the end or expiry of the competition or the promotion and the handing over of the prize.

If a participant has consented to the sending of information about products and services of a-tune software AG when registering, the further processing of the data and information covered by this consent will be carried out in accordance with the legal provisions.

If personal data is processed by you, you are a data subject within the meaning of the GDPR and you are entitled to the data subject rights listed in Chapter 2 against us as the controller.

10. Google Analytics

(1)If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google LLC. The responsible party for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

(2)Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by means of the cookies about your use of this website is generally transferred to a Google server in the USA and stored there. Google Analytics 4 has IP address anonymization enabled by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your website visit, your user behavior is recorded in the form of “events”. Events can be:

  • Page views
  • First visit to the website
  • Start of session
  • Your “click path”, interaction with the website
  • Scrolls (whenever a user scrolls to the bottom of the page (90%))
  • clicks on external links
  • internal search queries
  • interaction with videos
  • file downloads
  • seen / clicked ads
  • language settings

Also recorded:

  • Your approximate location (region)
  • your IP address (in shortened form)
  • technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
  • your internet service provider
  • the referrer URL (via which website/advertising medium you came to this website)

(3) Zwecke der Verarbeitung
On behalf of the operator of this website, Google will use this information to evaluate your [pseudonymous] use of the website and to compile reports on website activity. The reports provided by Google Analytics serve to analyse the performance of our website.

(4) Empfänger
Recipients of the data are/may be:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor under Art. 28 DSGVO).
  • Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
  • Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

It cannot be ruled out that US authorities may access the data stored by Google.

(5)Insofar as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.

(6)The data sent by us and linked to cookies are automatically deleted after 14 months. The deletion of data whose retention period has been reached occurs automatically once a month.

(7)The legal basis for this data processing is your consent pursuant to Art.6 para.1 p.1 lit. a GDPR.

(8)You can revoke your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. The lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected.

You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may result in a restriction of functionalities on this and other websites. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google, by

a. not giving your consent to the setting of the cookie or
b. downloading and installing the browser add-on to disable Google Analytics HERE.

For more information on Google Analytics’ terms of use and Google’s privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/us/ and at https://policies.google.com/?hl=en.

11. Google AdWords

(1) This website uses Google Adwords, a web service of Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

(2) We use Google Adwords to draw attention to our offers by means of advertising material (so-called Google Adwords) on external websites. We can determine in relation to the data of the advertising campaigns, how successful the individual advertising measures are. With this, we pursue the interest to show you advertising that is of interest to you, to make our website more interesting and to achieve a fair calculation of advertising costs. These advertising media are delivered by Google via so-called “Ad Servers”. For this purpose, we use ad server cookies, which allow us to measure certain parameters to measure success, such as the display of ads or clicks by users. If you reach our website via a Google ad, Google Adwords will store a cookie on your device. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be contacted) are usually stored as analysis values for this cookie. These cookies enable Google to recognize your internet browser. If a user visits certain pages of an AdWords client’s website and the cookie stored on their computer has not expired, Google and the client can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Adwords client. Cookies cannot be tracked through the websites of Adwords clients.

(3) We receive statistical evaluations from Google. By means of these evaluations we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, in particular we cannot identify the users on the basis of this information. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and save your IP address.

(4) The legal basis for this data processing is according to Art.6 para.1 sentence 1 lit. a) GDPR your consent, which gets collected via the cookie banner. You can withdraw your consent at any time with effect for the future by calling up the cookie settings and changing your selection there. You can also prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of this data by Google by not giving your consent to the setting of the cookie or by permanently contradicting the cross-device remarketing/targeting by deactivating personalized advertising in your Google account; follow this link to do so: https://www.google.com/settings/ads/onweb/.

(5) Recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as a processor. For this purpose, we have concluded a data processing agreement with Google and concluded the EU standard data protection clauses. Google LLC, based in California, USA, and, where applicable, U.S. authorities may have access to the data stored by Google. Further privacy information on Google AdWords, Google Conversion Tracking and the privacy policy can be found at: https://policies.google.com/privacy?hl=en-US.

12. tick@lab resource library

(1) tick@lab Resource Library is a software platform for the management of animal experimental facilities, an animal house database, which is made available to customers with a valid support contract. In this portal, customers are provided with resources such as templates, cage cards for integration into the customer system and release notes.

(2) Only the following data will be collected and stored:

  • First and last name
  • Company and company e-mail

The collection is used for the registration of the portal, with which customers can assign themselves a password. The legal basis is Art. 6 para. 1 letter b) GDPR.

(3) The collection of data is stored only until the purpose is fulfilled. After that, the data will be deleted immediately, unless there is a legal retention period.

(4) Appropriate security arrangements have been made to prevent potential data loss

13. Zoho Desk

(1) Zoho Desk is an issue management system. We use it to track and manage all client requests.

(2) We use the data provided for the requested services. These data are called “service data” by the provider Zoho and are processed confidentially and only with limited access. Zoho does not act as a processor for us and processes the data under its own responsibility, which we will automatically inform you about when we receive your ticket via e-mail. The legal basis for this is the necessary data processing in the ticketing system to process your request according to Art. 6 (1) letter b) GDPR.

(3) The recipient of the data is Zoho, Chennai, Estancia IT Park, Plot no. 140, 151, GST Road, Vallancheri, Chengalpattu District- 603 202, India. You can find more information under the following link: https://www.zoho.com/privacy.html

14. Visitor Code Multiview

(1) Multiview is a web analytics tool that by matching IP addresses visited on our website with their database for advertising purposes. Through a code integrated into our website, Multiview can analyze the user behavior of our customers.

(2) The analysis of the data serves exclusively to optimize the services we offer our customers. The legal basis for this is Art. 6 para. 1 letter f) DSGVO. We use this data only for the above-mentioned purposes.

(3) The Provider uses only reasonable physical, technological and administrative safeguards to protect your personal data from unauthorized use, access or disclosure. For this purpose, among others, encryption services and SSL certificate providers are used.

(4) The collected data will not be transmitted to third parties. Furthermore, neither cookies nor tracking are used.

(5) The collected personal data will only be stored for the period until the purpose is fulfilled. After that, they are deleted immediately, unless there is a legal retention period.

(6) Multiview processes the personal data of data subjects from the European Union and Switzerland as a third country, USA. For inquiries or complaints, you may contact Multiview directly at the following address: DataPrivacyOffice@multiview.com. For more information: https://www.multiview.com/privacy-policy.

15. Newsletter

(1) We send newsletters, e-mails and other electronic notifications containing promotional information. Our newsletters contain information about our products, offers, promotions and our company. With the following notes we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure and your right of objection.

(2) For the subscription to our newsletter we use a logged Double-Opt-in procedure. This means that after subscription you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that nobody can register with foreign e-mail addresses. Newsletter subscriptions are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address. Changes to your data stored by the service provider are also logged. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

(3) To subscribe to the newsletter, it is sufficient to enter your e-mail address. The provision of further data is voluntary and is used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending the newsletter. The newsletter dispatch and the measurement of performance are based on your consent in accordance with Art. 6 Para. 1 lit. a, Art. 7 GDPR.