We are pleased about your use of our website. The protection of your personal data is important to us and we want you to feel safe when using our website.

1. Information concerning the collection of personal data

(1) The following shall inform you about the collection, processing and utilization of personal data on our website. Personal data means all data relating to a living individual who can be identified.

(2) Controller as per the EU General Data Protection Regulation (GDPR) is:

a-tune software AG
Julius-Reiber-Str. 15
64293 Darmstadt

You can reach our data protection officer by contacting us via email at a-tune data privacy or by sending us a letter addressed to “Data Protection Officer”.

(3) If we use contracted service providers for individual functions to present our services to you or to your data for advertising purposes, we will inform you in detail about the respective processes below.

2. Your rights as a data subject

(1) You have the following rights against us with respect to the personal data concerning you:

  • Right of access by the data subject (Art. 15 GDPR): You have the right to request information on the data we hold about you from us at any time. This information includes, but is not limited to, the categories of data we process, the purposes for which it is processed, the source of the data if not collected directly from you, and, if applicable, the recipients with whom we have shared your data. You can obtain a copy of your data from us free of charge. If you require additional copies, we reserve the right to charge you for these copies;
  • Right to rectification (Art. 16 GDPR): You have the right to request that we rectify inaccurate data relating to you. We will take appropriate steps to keep the data we store and process on an ongoing basis accurate, complete and current, based on the most up-to-date information available;
  • Right to erasure (Art. 17 GDPR): You have the right to demand the deletion of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
  • Right to restriction of processing (Art. 18 GDPR): You have the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, if the processing is unlawful but you refuse to have it deleted and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or if you have lodged an objection to the processing pursuant to Art. 21 GDPR;
  • Right to data portability (Art. 20 GDPR): You have the right to request that we transfer your data – if technically possible – to another responsible party. However, you may only enforce this right if data processing is based on your consent or is necessary for the performance of a contract. Rather than receiving a copy of your data, you may also ask us to submit the data directly to another responsible party specified by you.
  • Right to object (Art. 21 GDPR): You have the right to object to the processing of your data at any time for reasons that arise from your particular situation, as long as data processing is based on your consent, on our legitimate interests or those of a third party. In this case, we will cease to process your data. This does not apply if we can show that there are compelling legitimate grounds for processing that outweigh your interests, or if we need your data for the establishment, exercise or defence of legal claims.
  • Right to withdraw consent (Art. 7 (3) GDPR): You have the right to revoke your consent to us at any time. As a result, we are not allowed to continue the data processing that was based on this consent in the future.

(2) Inquiries regarding your rights as a data subject you can direct to us under the contact details mentioned under §1 or by post to the controller’s postal address.

(3) If you have the feeling we have not responded in an appropriate manner to your complaints or you have further concerns, you additionally have the right to complain to a data protection authority. The responsible authority to us is the “Hessische Beauftragte für Datenschutz und Informationsfreiheit“: http://www.datenschutz.hessen.de.

3. Collection of personal data when visiting our website

(1) If you use the website simply for informational purposes, i.e. if you do not register yourself or send us any information, we collect only the personal data which your browser sends to our server. If you wish to view our website, we collect the following technical data which we need to enable us to show you our website and ensure stability and security (the legal basis is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR):

  • IP address
  • Date and time of the query
  • Time zone difference relative to Greenwich Mean Time (GMT)
  • Content of the query (specific site)
  • Access status/HTTP status code
  • Data volume transmitted in each case
  • Website from which the request emanates
  • Browser
  • Operating system and its user interface
  • Language and version of the browser software

The data mentioned above gets processed for the following purposes:

  • To ensure a smooth connection of the website,
  • Guarantee a comfortable use of our website,
  • Evaluation of system security and stability as well as for other administrative purposes.

This information is temporarily stored in so-called log files. This information is recorded without your intervention and stored until it is automatically deleted.

4. Cookies

5. Recipients or categories of recipients of personal data

(1) Within the scope of our activities and services, it may become necessary for us to disclose the personal data stored about you to natural persons, legal entities or public authorities. We conclude contracts with our service providers, which ensure that they may only process your personal data in a way that we have explicitly instructed them to do so. Furthermore, we ensure that they take the necessary technical and organizational measures to process your data securely and store your personal data only as long as necessary. External service providers who may receive personal data generally fall into the following categories of recipients:

  • Credit institutions and providers of payment services for billing and payment processing (online payment providers)
  • Parcel Shipper
  • IT service provider to maintain our IT infrastructure
  • Cloud provider
  • Service provider for the optimization of the online offer
  • Collection service providers or lawyers to collect receivables and enforce claims in court. If, in the event of a collection case, personal data (customer and contact data, payment and consumption data and data on the claim) is transferred to a collection service provider, we will inform you in advance about the intended transfer.

(2) If data is processed in countries outside the European Union or the EWR, we will ensure that your personal data is processed in accordance with the European data protection level. In the absence of a decision by the EU Commission, we only transfer data to service providers from third countries that offer suitable guarantees in accordance with Art. 46 GDPR (usually EU Standard Contract Clauses). In cases where this cannot be ensured even through this contractual extension, we endeavor to obtain additional regulations and commitments from the data recipient.

6. Contact form

(1) When you contact us (for example by e-mail or via the contact form), the information you provide will be processed for the purpose of processing your request and for the event that follow-up questions arise. The contact form is an additional service provided by us to enable you to contact us quickly and easily and is based on Art. 6 para. 1 f GDPR.

(2) The personal data collected by us in this context will be deleted when the request associated with the contact has been completely clarified and it is also not to be expected that the specific contact will become relevant again in the future, unless legal storage obligations stand against this.

7. Social Media, portals

(1) We are represented in the social networks and employer evaluation portals mentioned below. These presences are operated exclusively by the respective provider. They serve to communicate directly with customers, interested parties and users. If you contact us via our social media channels, we process the data that you provide us with as well as the data that is necessary to process your request (Art. 6 para. 1 letter b GDPR). Insofar as you have given your consent to the operators of the respective social media platforms (e.g. by means of a checkbox opt-in), the processing is carried out on the basis of Art. 6 para. 1 a GDPR. You can revoke your consent at any time with the operator of the respective platform with effect for the future.

(2) When you visit our social media pages, your user data is recorded and provided to us by the operator. The exact types of data differ from provider to provider, but generally include the following information:

  • Follower: number and stored profiles; information about growth and development over a defined time frame.
  • Reach: number of people who see a specific contribution; number of interactions with a contribution. From this, it can be deduced, for example, which content is better received by the community than others.
  • Ad performance: How many people were reached by a contribution or a paid ad and have interacted with it?
  • Demographics: Average age of visitors, gender, location, language.

(3) Since our social media channels are operated by the providers of the respective social network, there may be a supplementary use of your personal data by the respective operator, over which we have no influence. This often involves the recording of your IP address, the creation of static evaluations and the processing of further information stored in the form of cookies. We have no influence on the generation and presentation of this data and can neither turn off this function nor prevent the processing of the data.

(4) The assertion of data subject rights and requests can most effectively be addressed directly to the platform providers, since only they have access to your data and can take immediate action and provide information. Should our cooperation be necessary for this, we will support you in enforcing your rights as a data subject.

(5) More detailed information about the terms of use of the respective platform as well as a detailed description of further data processing and the respective possibilities of objection can be found on the pages of the providers under:

LinkedIn (LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland): https://www.linkedin.com/legal/privacy-policy.

Xing (New Work SE, Dammtorstraße 30, 20354 Hamburg, Deutschland): https://privacy.xing.com/de/datenschutzerklaerung/allgemeine-hinweise.

8. Friendly Captcha

Our website uses the service “Friendly Captcha” (www.friendlycaptcha.com). This service is an offer of Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany. Friendly Captcha is a novel, privacy-friendly protection solution to make it more difficult for automated programs and scripts (so-called “bots”) to use our website.

For this purpose, we have integrated a program code from Friendly Captcha into our website (e.g. for contact forms), so that the visitor’s terminal device can establish a connection to Friendly Captcha’s servers in order to receive a calculation task from Friendly Captcha. The visitor’s terminal solves the calculation task, which takes up certain system resources, and sends the calculation result to our web server. The server contacts the Friendly Captcha server via an interface and receives a response indicating whether the puzzle was solved correctly by the end device. Depending on the result, we can apply security rules to requests via our website and thus, for example, process or reject them.

The data is used exclusively for the protection against spam and bots described above. Friendly Captcha does not set or read cookies on the visitor’s terminal device. IP addresses are only stored in hashed (one-way encrypted) form and do not allow us and Friendly Captcha to draw any conclusions about an individual person.

If personal data is collected, it will be deleted after 30 days at the latest.

The legal basis for the processing is our legitimate interests in protecting our website against abusive access by bots, i.e. spam protection and protection against attacks (e.g. mass requests), Art. 6 (1) lit. f GDPR.

Further information on data protection when using Friendly Captcha can be found at https://friendlycaptcha.com/legal/privacy-end-users/. Further information on Friendly Captcha’s Terms can be found at https://friendlycaptcha.com/legal/terms/.

9. Data protection information for competitions and promotions

Occasionally, a-tune software AG organizes competitions and promotions in which customers and interested parties can participate. We would like to inform you below about the processing of your personal data in connection with these sweepstakes and promotions in accordance with Art 13 GDPR.

(1) When you participate in a contest or promotion, we process the data and information you provide in the registration form. This includes the data required for participation such as:

  • name and surname,
  • organization,
  • e-mail-address

as well as, if applicable, the data and information voluntarily provided by you in the course of participation.

(2) Your personal data is processed for the purpose of handling the competition or promotion, in particular for determining and notifying the winners.

For the purpose of sending and delivering prizes, we may subsequently collect and process further data, e.g. your postal address.

(3) The legal basis for the processing is the fulfillment of the contractual relationship existing through participation in the competition (Art. 6 para. 1 sentence 1 lit. b GDPR).

(4) You can object to the processing of your data at any time. To do so, send a message to a-tune data privacy.

We would like to point out that in the event of an objection, further participation in the competition or the promotion is excluded.

(5) The processed data will be deleted after the end or expiry of the competition or the promotion and the handing over of the prize.

If a participant has consented to the sending of information about products and services of a-tune software AG when registering, the further processing of the data and information covered by this consent will be carried out in accordance with the legal provisions.

If personal data is processed by you, you are a data subject within the meaning of the GDPR and you are entitled to the data subject rights listed in Chapter 2 against us as the controller.

10. Google Analytics

(1) This website uses Google Analytics, a web analysis service of Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

(2) We use Google Analytics to analyze the use of our website in order to improve it regularly. With the statistics obtained, we can improve our offer, make it more interesting for you as a user and increase the success of our marketing campaigns. For this purpose, your usage data is recorded, e.g. your IP address, the pages you have called up (click path), conversions such as newsletter registrations or downloads, clicks, length of stay, region or the technical information on your browser. For this Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred and stored in a Google server in the US.

(3) The legal basis for this data processing is according to Art. 6 (1) sentence 1 lit. a) GDPR your consent, which you have given via the cookie banner. Processing is performed to analyze and optimize our website. You can revoke your consent at any time with effect for the future by calling up the cookie and changing your selection there. You can also prevent the storage of cookies by changing the settings of your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by not giving your consent to the setting of the cookie or by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

This website uses Google Analytics with the extension “anonymizeIp”. This means that IP addresses are processed in abbreviated form, which means that it is not possible for us to identify a person. Only in exceptional cases the full IP address is transferred to a Google server in the USA and shortened there. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other data from Google.

(4) Recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as a processor. For this purpose, we have concluded a data processing agreement with Google and concluded the EU standard data protection clauses. Google LLC, based in California, USA, and, where applicable, U.S. authorities may have access to the data stored by Google. Please see Google’s Privacy Policy for more information about the purpose and scope of the data collected and processed by Google and for further information about your privacy rights and setting options: www.google.com/policies/privacy, http://www.google.com/analytics/terms/us.html, overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, privacy policy: http://www.google.de/intl/en/policies/privacy.

11. Google AdWords

(1) This website uses Google Adwords, a web service of Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

(2) We use Google Adwords to draw attention to our offers by means of advertising material (so-called Google Adwords) on external websites. We can determine in relation to the data of the advertising campaigns, how successful the individual advertising measures are. With this, we pursue the interest to show you advertising that is of interest to you, to make our website more interesting and to achieve a fair calculation of advertising costs. These advertising media are delivered by Google via so-called “Ad Servers”. For this purpose, we use ad server cookies, which allow us to measure certain parameters to measure success, such as the display of ads or clicks by users. If you reach our website via a Google ad, Google Adwords will store a cookie on your device. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be contacted) are usually stored as analysis values for this cookie. These cookies enable Google to recognize your internet browser. If a user visits certain pages of an AdWords client’s website and the cookie stored on their computer has not expired, Google and the client can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Adwords client. Cookies cannot be tracked through the websites of Adwords clients.

(3) We receive statistical evaluations from Google. By means of these evaluations we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, in particular we cannot identify the users on the basis of this information. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and save your IP address.

(4) The legal basis for this data processing is according to Art.6 para.1 sentence 1 lit. a) GDPR your consent, which gets collected via the cookie banner. You can withdraw your consent at any time with effect for the future by calling up the cookie settings and changing your selection there. You can also prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of this data by Google by not giving your consent to the setting of the cookie or by permanently contradicting the cross-device remarketing/targeting by deactivating personalized advertising in your Google account; follow this link to do so: https://www.google.com/settings/ads/onweb/.

(5) Recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as a processor. For this purpose, we have concluded a data processing agreement with Google and concluded the EU standard data protection clauses. Google LLC, based in California, USA, and, where applicable, U.S. authorities may have access to the data stored by Google. Further privacy information on Google AdWords, Google Conversion Tracking and the privacy policy can be found at: https://policies.google.com/privacy?hl=en-US.

12. tick@lab resource library

(1) tick@lab Resource Library is a software platform for the management of animal experimental facilities, an animal house database, which is made available to customers with a valid support contract. In this portal, customers are provided with resources such as templates, cage cards for integration into the customer system and release notes.

(2) Only the following data will be collected and stored:

  • First and last name
  • Company and company e-mail

The collection is used for the registration of the portal, with which customers can assign themselves a password. The legal basis is Art. 6 para. 1 letter b) GDPR.

(3) The collection of data is stored only until the purpose is fulfilled. After that, the data will be deleted immediately, unless there is a legal retention period.

(4) Appropriate security arrangements have been made to prevent potential data loss

13. Zoho Desk

(1) Zoho Desk is an issue management system. We use it to track and manage all client requests.

(2) We use the data provided for the requested services. These data are called “service data” by the provider Zoho and are processed confidentially and only with limited access. Zoho does not act as a processor for us and processes the data under its own responsibility, which we will automatically inform you about when we receive your ticket via e-mail. The legal basis for this is the necessary data processing in the ticketing system to process your request according to Art. 6 (1) letter b) GDPR.

(3) The recipient of the data is Zoho, Chennai, Estancia IT Park, Plot no. 140, 151, GST Road, Vallancheri, Chengalpattu District- 603 202, India. You can find more information under the following link: https://www.zoho.com/privacy.html

14. Visitor Code Multiview

(1) Multiview is a web analytics tool that by matching IP addresses visited on our website with their database for advertising purposes. Through a code integrated into our website, Multiview can analyze the user behavior of our customers.

(2) The analysis of the data serves exclusively to optimize the services we offer our customers. The legal basis for this is Art. 6 para. 1 letter f) DSGVO. We use this data only for the above-mentioned purposes.

(3) The Provider uses only reasonable physical, technological and administrative safeguards to protect your personal data from unauthorized use, access or disclosure. For this purpose, among others, encryption services and SSL certificate providers are used.

(4) The collected data will not be transmitted to third parties. Furthermore, neither cookies nor tracking are used.

(5) The collected personal data will only be stored for the period until the purpose is fulfilled. After that, they are deleted immediately, unless there is a legal retention period.

(6) Multiview processes the personal data of data subjects from the European Union and Switzerland as a third country, USA. For inquiries or complaints, you may contact Multiview directly at the following address: DataPrivacyOffice@multiview.com. For more information: https://www.multiview.com/privacy-policy.

15. Newsletter

(1) We send newsletters, e-mails and other electronic notifications containing promotional information. Our newsletters contain information about our products, offers, promotions and our company. With the following notes we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure and your right of objection.

(2) For the subscription to our newsletter we use a logged Double-Opt-in procedure. This means that after subscription you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that nobody can register with foreign e-mail addresses. Newsletter subscriptions are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address. Changes to your data stored by the service provider are also logged. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

(3) To subscribe to the newsletter, it is sufficient to enter your e-mail address. The provision of further data is voluntary and is used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending the newsletter. The newsletter dispatch and the measurement of performance are based on your consent in accordance with Art. 6 Para. 1 lit. a, Art. 7 GDPR.