Privacy Policy

EASY SOFTWARE AG, as the operator of this website, takes the protection of your personal data very seriously. We treat your personal data confidentially, in accordance with the statutory data protection provisions and on the basis of this Privacy Policy. Where we refer generally to “data” in this document, this always means personal data within the meaning of the General Data Protection Regulation.

SCOPE OF DATA COLLECTION AND STORAGE

PURPOSE OF DATA PROCESSING

In general, it is not necessary for you to provide personal data in order to use our website. However, in order for us to actually provide our services, we may require your personal data. This applies both to the sending of information materials and to responding to individual inquiries.

CONSENT TO DATA PROCESSING

If we carry out any of the actions described below or provide any other services, we would like to collect, track and store your personal data. For this purpose, we will request your express consent at the relevant point on our website, for example in connection with:

• personalizing our website,
• analyzing usage behavior.

Processing takes place only where there is a legal basis for doing so, in particular consent or a legitimate interest.

If you request information or use personalized services, we will collect further data, as described in the section “Newsletter and Other Advertising”, to the extent necessary for the performance of a contract or on the basis of your consent.

WHICH CATEGORIES OF PERSONAL DATA ARE PROCESSED

We store the following data:

For tracking purposes, we use cookie-setting technology. This information enables recognition when you visit the website again. In the tracking tool used, the IP address is anonymized and then stored in anonymized form.

Web Tracking and Analytics

We use systems provided by the following providers for analytics purposes.

Hubspot

We use HubSpot for our online marketing activities. HubSpot is an integrated software solution that enables us to cover various aspects of our online marketing. HubSpot may be used for the following purposes:

• content management, including website and blog,
• social media publishing and reporting,
• reporting, for example traffic sources, visits and similar metrics,
• landing pages and contact forms.

We use HubSpot on the basis of the EU Standard Contractual Clauses. Details of the scope of data collection and storage by HubSpot and HubSpot’s privacy policy are available at https://legal.hubspot.com/de/privacy-policy.

In particular, we use HubSpot Forms to provide a contact form. The data you enter, such as your name, email address, telephone number, company details and message content, may be processed. In addition, technical data such as your IP address, browser information, the date and time of submission and other usage data may be collected.

Personal data is processed on the basis of Article 6(1)(b) GDPR where the processing is necessary in order to take steps prior to entering into a contract or for the performance of a contract. In all other cases, processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the efficient handling of inquiries and the management of customer and prospect contacts. Where you have given your consent in our cookie consent management tool, processing is carried out on the basis of Article 6(1)(a) GDPR.

Processing is carried out for the purpose of handling and responding to inquiries, contacting prospective and existing customers, managing communication processes and improving our sales and service processes.

Personal data is stored only for as long as is necessary to achieve the purposes referred to above or for as long as statutory retention obligations apply. If the purpose of processing ceases to apply and there are no statutory retention obligations, the data will be deleted.

Where you have given your consent in our consent management tool, you may withdraw that consent at any time with effect for the future.

Google Analytics 4

This website uses the web analytics service Google Analytics 4 (“GA4”) provided by Google Ireland Limited. The provider in Europe is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics 4 uses cookies and comparable technologies to evaluate the use of our website. In particular, the following data may be processed:

• truncated IP address,
• pages accessed,
• usage behavior and interactions,
• technical information about the browser and end device,
• referrer URL,
• approximate location data.

IP anonymization is enabled by default in Google Analytics 4. This means that the IP address is truncated within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area before transmission.
It cannot be ruled out that data may be transferred to servers of Google LLC in the United States. For data transfers to the United States, Google relies on the adequacy decision of the European Commission and on appropriate safeguards pursuant to Article 46 GDPR.
Processing takes place only after you have given your express consent via our consent management tool.
The legal basis for storing information on end devices and accessing such information is Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is Article 6(1)(a) GDPR (consent).

The processing of personal data enables us to analyze the usage behavior of visitors to our website. By evaluating the data obtained, we are able to compile information about the use of individual components of our website and to continuously improve the usability and quality of our online offering.

The personal data processed by Google Analytics 4 will be deleted as soon as it is no longer required for the purposes for which it was collected.
The retention period for user data is a maximum of 14 months, unless statutory retention obligations apply or shorter retention periods have been specified.

You may withdraw or amend your consent at any time with effect for the future via our consent management tool.
In addition, you may prevent the storage of cookies by selecting the appropriate settings in your browser software. Cookies that have already been set may be deleted at any time.
You may also prevent Google from collecting and processing your data by downloading and installing the browser add-on available at the following link:
Browser add-on for disabling Google Analytics.

matomo

We use the open-source software tool Matomo (formerly PIWIK) on our website to analyze the browsing behavior of our users. The software places a cookie on users’ computers (see the information on cookies above). When individual pages of our website are accessed, the following data is stored:

• two bytes of the IP address of the user’s accessing system,
• the website accessed,
• the website from which the user reached the accessed website (referrer),
• the sub-pages accessed from the accessed website,
• the time spent on the website,
• the frequency with which the website is accessed.

The software runs exclusively on the servers of our website. Users’ personal data is stored only there. The data is not disclosed to third parties.

The software is configured so that IP addresses are not stored in full; instead, two bytes of the IP address are masked (e.g. 192.168.xxx.xxx). This means that the truncated IP address can no longer be assigned to the accessing computer.

The legal basis for processing users’ personal data is Article 6(1)(f) GDPR.
The processing of users’ personal data enables us to analyze their browsing behavior. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us continuously improve our website and its usability. These purposes also constitute our legitimate interest in processing the data pursuant to Article 6(1)(f) GDPR. The anonymization of the IP address adequately takes account of users’ interest in the protection of their personal data.

The data will be deleted as soon as it is no longer required for our recording purposes.
In our case, this occurs after 425 days.

Cookies are stored on the user’s computer and transmitted from there to our website. As a user, you therefore have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies already stored may be deleted at any time. This may also be done automatically. If cookies are disabled for our website, not all functions of the website may be fully available.

We offer users of our website the option to opt out of the analytics process. To do so, you must remove the check mark from the relevant checkbox. This will place another cookie on your system, which signals to our system that the user’s data should not be stored. If the user deletes the corresponding cookie from their own system in the meantime, the opt-out cookie must be set again. You have the option to prevent actions you take here from being analyzed and linked. This will protect your privacy, but it will also prevent the website operator from learning from your actions and improving usability for you and other users.

Google Ads Conversion-Tracking

This website uses Google Ads Conversion Tracking, an analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you access our website via a Google advertisement, Google uses a cookie or comparable recognition technologies in order to track certain user actions.

In particular, the following data may be processed:

• IP address,
• device and browser information,
• referrer URL,
• interaction data,
• conversion data,
• time stamps,
• approximate location data.

The information collected is used to compile conversion statistics. In this context, we receive only statistical analyses and no information that enables individual users to be directly personally identified.

It cannot be ruled out that personal data may be transferred to Google LLC. Google is certified under the EU-U.S. Data Privacy Framework (DPF). Data transfers to the United States are based on the adequacy decision of the European Commission pursuant to Article 45 GDPR. Further information is available at: Google Privacy Policy

The legal basis for storing information on end devices and accessing such information is Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is Article 6(1)(a) GDPR (consent). The processing serves to analyze and measure the success of our advertisements. This enables us to understand how effective our advertising measures are and to optimize our online offering.

Conversion cookies set by Google Ads generally expire after 30 days, unless they are deleted earlier. You may withdraw your consent at any time via our consent management tool. In addition, you may prevent the storage of cookies by selecting the appropriate settings in your browser software or delete cookies that have already been stored. You may also disable personalized advertising via Google’s advertising settings:
Google Advertising Settings

Google Tag Manager

We use Google Tag Manager to manage and deploy website tags. Google Tag Manager itself does not create user profiles and generally does not store cookies. However, for technical reasons, in particular the IP address as well as information about the browser and end device used may be transmitted to Google servers.

Processing is carried out on the basis of Article 6(1)(f) GDPR, provided that Google Tag Manager is used exclusively for the technical management of tags. Where services requiring consent are loaded via Google Tag Manager, those services are executed only after you have given your consent pursuant to Article 6(1)(a) GDPR.

The use of Google Tag Manager serves the efficient management, control and integration of website tags and the technical optimization of our online offering.

Personal data is processed only for as long as is necessary to fulfill the respective purposes. In all other respects, the retention period depends on the services integrated via Google Tag Manager. You may withdraw any consent you have given at any time with effect for the future or adjust your selection by accessing the settings of our consent management tool.

Google Search Console

This website uses Google Search Console. This service is used to collect information about individual web pages that is obtained during automated analysis, known as crawling. The information collected, such as loading speed, mobile optimization, pages that cannot be accessed successfully and search queries, is not classified as personal data.

Clarity

In some of our products, we use Microsoft Clarity, a technology that helps us understand how our products are used, which images and text passages attract attention, and how we can create an even better user experience.

The provider, Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, https://docs.microsoft.com/en-us/clarity/ (hereinafter “Clarity”), is certified under the EU-U.S. Data Privacy Framework (DPF), an agreement between the European Union and the United States that ensures compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider.

Clarity uses technologies that enable users to be recognized for the purpose of analyzing user behaviour, such as cookies or device fingerprinting. Your personal data is stored on Microsoft servers, specifically the Microsoft Azure Cloud Service, in the United States.

We mask sensitive areas and do not evaluate them. In this context, we collect customary visitor data, such as IP address, location, browser information, screen resolution, language settings, sub-pages visited, date and time of access to the website, and mouse movements.

Processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.

The data will be deleted as soon as it is no longer required for the purposes stated. As a rule, session recordings are retained for 30 days, and heatmaps, click data and aggregated usage data are retained for 13 months.

You may withdraw your consent at any time via our consent management tool.

Further details on Clarity’s privacy practices can be found here.

Microsoft Advertising

We use Microsoft Advertising, a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (“Microsoft Advertising”), to display, deliver and optimize online advertisements.

Personal data may be processed in connection with the use of Microsoft Advertising. This includes, in particular:

• IP address of the end device
• device and browser information, such as operating system, browser type and language settings
• usage behavior on our website, such as pages accessed, click behavior and time spent on the website
• referrer URL, meaning the website previously visited
• online identifiers, such as cookie IDs, advertising IDs and pixel IDs
• where applicable, search terms, insofar as they are processed in connection with advertisements via search engines or partner networks

Microsoft uses cookies and similar technologies for this purpose, which enable end devices to be recognized and serve to measure and optimize advertising measures, such as conversion tracking, reach measurement and frequency capping.

We do not directly combine this data with clearly identifying personal data, such as your name or email address.

In connection with the use of Microsoft Advertising, personal data may also be transferred to third countries, in particular to the United States. Microsoft operates international server infrastructures, meaning that processing outside the European Union cannot be ruled out.

Where data is transferred to the United States, such transfer is based on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework (DPF) pursuant to Article 45 GDPR, provided that the respective recipient is certified accordingly. Otherwise, the transfer takes place on the basis of the European Commission’s Standard Contractual Clauses pursuant to Article 46 GDPR and additional technical and organizational measures to protect personal data.

Further information on data processing by Microsoft is available at:
Microsoft Privacy Statement

The processing of personal data in connection with Microsoft Advertising is based on your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG, where cookies or comparable technologies are set or read.

Consent is obtained via our consent management tool and may be withdrawn at any time with effect for the future.

Personal data is processed for the following purposes:

• displaying and delivering advertisements
• measuring the effectiveness of advertising campaigns (conversion tracking)
• reach analysis and statistical evaluation
• optimizing and personalizing advertising content
• preventing the repeated display of the same advertisement (frequency capping)
• improving the user experience by providing more relevant advertising
• fraud prevention and abuse detection within the advertising network

The data collected helps us design our marketing activities in an economical and targeted manner.

The storage of personal data in connection with Microsoft Advertising is governed by Microsoft’s requirements and the type of technologies used. Cookies and comparable technologies are generally stored for a period of up to 13 months, unless they are deleted earlier by the user. Aggregated or anonymized data may be stored beyond this period, as it no longer relates to an identifiable person. We ourselves do not permanently store any raw personal data in connection with Microsoft Advertising, but receive only statistical analyses.

Further information on retention periods can be found in Microsoft’s privacy notices.

You have the right to withdraw your consent at any time with effect for the future. Withdrawal may be carried out in particular via our cookie consent tool by adjusting your settings or disabling consent previously given. In addition, you may delete cookies at any time in your browser settings or disable their storage.

You can also control or disable interest-based advertising by Microsoft through the following options:

• settings in the Microsoft Privacy Dashboard
• opt-out via standard industry advertising preference platforms, such as “AdChoices”
• browser-based tracking deactivation

Please note that, if cookies or tracking technologies are disabled, not all functions of our website may be fully available.

Bing-Webmaster-Tools

We use Bing Webmaster Tools, a web service provided by Microsoft Corporation. When Bing Webmaster Tools are used, Microsoft may in particular collect technical information such as the IP address, browser data, device settings, referring URLs and usage data. Collection takes place automatically when our website is accessed, provided that the corresponding analytics functions of Microsoft are integrated.

It cannot be ruled out that personal data may be transferred to Microsoft Corporation. Microsoft is certified under the EU-U.S. Data Privacy Framework (DPF). Data transfers to the United States are based on the adequacy decision of the European Commission pursuant to Article 45 GDPR.

Processing is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR. Our legitimate interest lies in analyzing website performance, technically optimizing the website and improving the visibility of our website in search engines. Where prior consent via a consent management tool is required, for example for the storage of cookies or comparable technologies, processing is instead carried out on the basis of your consent pursuant to Article 6(1)(a) GDPR.

The purpose of processing is to analyze the findability and technical functionality of our website. The data helps us identify errors, improve performance and optimize our website for search engines.

Microsoft stores the data in accordance with its own policies. The retention of personal data may vary depending on the type of information collected. Data may be deleted once it is no longer required for the analytics purposes provided by Bing Webmaster Tools. In addition, users may influence the transmission of certain data through browser or privacy settings.

You may generally object to the data processing by disabling tracking technologies in your browser or by withdrawing your consent in the consent management tool, where consent was required. Further information on Microsoft’s privacy practices and available settings can be found in Microsoft’s Privacy Statement: Microsoft Privacy Statement.

Supademo

We use the Supademo service on our website to provide interactive product demonstrations, guides and presentations. When a demo provided via Supademo is accessed, personal data and technical information may be processed. This may include, in particular, the IP address, information about the end device and browser used, the date and time of access, and usage and interaction data, such as clicks, viewing duration and navigation behavior within the demo.

Personal data is processed on the basis of Article 6(1)(f) GDPR where the integration of Supademo is necessary for the user-friendly presentation and optimization of our content. Where Supademo uses cookies or comparable technologies for analytics or tracking purposes, processing takes place exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

The data is processed for the purpose of providing interactive content, analyzing the use of our demos and presentations, and improving the user-friendliness and quality of our online offering.

The retention period for personal data depends on the respective processing purposes and Supademo’s requirements. Data will be deleted as soon as it is no longer required for the purposes for which it was collected and no statutory retention obligations prevent deletion.

Where you have given your consent via our consent management tool, you have the right to object to the processing of your personal data at any time. Further information: Supademo’s privacy policy is available at Supademo Privacy Policy.

WPML (Multilingual Functionality)

We use the WPML plugin on our website to provide multilingual content. WPML sets cookies in order to store the language you have selected and to display the website in accordance with your preference when you visit again. In this context, information about the selected language, technical information about the browser and end device used, and other data required to provide this functionality may be processed.

Cookies are stored and accessed on the basis of Section 25(2) No. 2 TDDDG, insofar as they are technically necessary for providing the multilingual website. The subsequent processing of personal data is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in providing a user-friendly multilingual website.

Processing is carried out for the purpose of storing your language preference and displaying the website in the language you have selected. This serves to improve user-friendliness and to ensure consistent use of our online offering. The cookies set by WPML are stored for as long as is necessary to maintain the selected language setting, or until you delete the cookies via your browser settings. Personal data will be deleted as soon as it is no longer required to achieve the purposes referred to above and no statutory retention obligations apply. You may restrict or prevent the storage of cookies by selecting the appropriate settings in your browser or in our cookie management tool, and you may delete cookies that have already been stored at any time. Please note that this may impair the proper functioning of the language switcher.

Cloudflare

We use services provided by Cloudflare to optimize, secure and reliably deliver our website. Among other things, Cloudflare provides a content delivery network (CDN) as well as security and protection functions against abusive access and attacks. In connection with the use of these services, technical information such as the IP address, information about the browser and operating system used, device data, the date and time of access, and information about the use of our website may be processed. Processing is carried out via servers of the provider Cloudflare, Inc.

Processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and efficient provision of our website and in protecting it against cyberattacks and abusive use.

Processing is carried out to improve the loading speed of our website, ensure technical availability, secure our systems, and detect and prevent harmful or automated access.

The data processed via Cloudflare is stored only for as long as is necessary for the purposes stated above. The specific retention period depends on the technical requirements and Cloudflare’s privacy terms. You cannot completely prevent processing by Cloudflare, as certain security and delivery functions may be necessary for the operation of our website. However, you may control the use of certain optional Cloudflare functions via our cookie management tool, where these are integrated through that tool.

jsDelivr CDN

We use the jsDelivr service on our website for the fast and reliable delivery of libraries, scripts, stylesheets and other technical resources. When our website is accessed, a connection may be established to jsDelivr servers, in the course of which technical information such as the IP address, information about the browser, operating system and device used, as well as the date and time of access, may be processed.

Processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the technically optimized, secure and efficient provision of our website and in improving loading times.

Processing is carried out for the purpose of optimizing the loading speed of our website, reliably delivering technical content and ensuring the stable functionality of our online services. The data processed by jsDelivr is stored only for as long as is necessary for the purposes stated. The specific retention period depends on the provider’s requirements and the technical requirements of the delivery process. You may prevent processing by jsDelivr by disabling the execution of JavaScript in your browser or by using appropriate browser settings. Please note that this may restrict the functionality and display of our website.

SOCIAL NETWORKS

On our pages, we may provide the option to share pages or materials on social networks. These networks, in turn, have their own privacy policies. Below you will find information on the social networks integrated by us.

YOUTUBE

Like most websites, the website of EASY SOFTWARE AG also embeds YouTube software as part of its information offering.

The YouTube software uses cookies for data collection and statistical analysis. YouTube uses cookies, among other things, to collect reliable video statistics, prevent fraud and improve user-friendliness. Through YouTube cookies, EASY SOFTWARE AG receives statistical values relating to views of individual videos embedded on the website, without any reference to the respective user. Embedded YouTube videos are used within the scope of the permitted use by YouTube, which all users must accept. If you believe that copyrights have been infringed, please report this directly to YouTube. Further details on the use of cookies by YouTube can be found in YouTube’s privacy policy at: http://www.youtube.com/t/privacy_at_youtube.

FACEBOOK

Our pages include plugins of the social network Facebook (Meta), provided by Meta Platforms Ireland Ltd. (“Meta”), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. If you click the Facebook “Like” button while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This enables Facebook to associate your visit to our pages with your user account.

We point out that, as the provider of the Facebook page https://de-de.facebook.com/EasySoftwareDE, we do not receive any knowledge of the content of the transmitted data or its use by Facebook. Further information can be found in Facebook’s privacy policy at http://de-de.facebook.com/policy.php.

If you do not want Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook account.

In addition, we use a plugin that ensures data is transmitted to Facebook only when the share button is clicked.

LINKEDIN SHARE BUTTONS

Our website uses the “LinkedIn Share Button”. By using a plugin, we ensure that data is transmitted to LinkedIn only when you actively use this button. With regard to the data transmitted in this context, please refer to LinkedIn’s privacy policy:

https://www.linkedin.com/legal/privacy-policy

You may opt out of the use of cookies for this service on the following page:

https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

LinkedIn Conversion Tracking (Insight Tag)

We use conversion tracking provided by LinkedIn Corporation on our website.

For this purpose, the LinkedIn Insight Tag is embedded on our website. This tool enables LinkedIn and us to track the behavior of visitors who have accessed our website via a LinkedIn advertisement.

In particular, the following data is processed:

• pages and sub-pages visited
• referrer URL
• clicks and interactions on the website
• conversions, such as completed actions
• IP address, truncated or pseudonymized
• device and browser information
• time stamp of access

For this purpose, a cookie is stored on your end device, provided that you have given your consent via our cookie consent tool.

The data collected by the Insight Tag is anonymized for us; however, where you are logged in, LinkedIn may associate the data with your LinkedIn account.

The legal basis for processing is your consent pursuant to Article 6(1)(a) GDPR.

The purpose of processing is to measure the effectiveness of advertisements (conversion tracking), as well as to statistically evaluate and optimize our marketing measures.

You may withdraw your consent at any time with effect for the future via our cookie consent tool.

LinkedIn Matched Audiences (Audience Creation / Remarketing)

We use the “Matched Audiences” feature provided by LinkedIn Corporation on our website.

This feature is used to create audiences for advertising purposes and to retarget visitors to our website on LinkedIn with interest-based advertising (remarketing).

In particular, the following data may be processed:

• pseudonymized website visit and usage data
• page views and interactions on our website
• IP address (truncated)
• cookie and device identifiers
• where applicable, hash values of email addresses (in the case of Customer Match uploads, if used)

Data processing takes place only if you have given your consent via our cookie consent tool. A cookie is placed on your end device that enables your browser to be recognized.

The legal basis is your consent pursuant to Article 6(1)(a) GDPR.

The purpose of processing is to deliver advertising to appropriate target audiences (retargeting), to create audiences (“Matched Audiences”) and to optimize our advertising campaigns.

The data may be processed by LinkedIn and transferred to the United States. Such transfer is carried out on the basis of the EU Standard Contractual Clauses and, where applicable, further appropriate safeguards pursuant to Article 46 GDPR. You may prevent collection by LinkedIn by withdrawing your consent in our cookie consent tool or by disabling personalized advertising in your LinkedIn account settings.

NEWSLETTER, ADVERTISING AND LEAD GENERATION

PURPOSE OF DATA PROCESSING

If you have subscribed to our newsletter by providing your email address (legal basis: Article 6(1) GDPR) and, where applicable, additional data, we would also like to use your email address for our own advertising purposes beyond the performance of any contract, until you unsubscribe from receiving the newsletter. This includes, among other things, the following purposes:

• sending various newsletters,
• providing additional services and offers for which your express consent to data collection is required,

participation in competitions and promotional campaigns.

YOUR CONSENT AND FURTHER INFORMATION

During the registration process, you will be asked to provide the following declaration:

Consent to data processing in accordance with our Privacy Policy: “I consent to EASY SOFTWARE AG using the personal data I provide here for the purposes of information, customer support and customer surveys, and advertising, until further notice, and contacting me for these purposes by email, including on a regular basis, or by telephone. I consent to EASY SOFTWARE AG transferring this data to its affiliated companies or sales partners for the purposes stated above.” You may withdraw this declaration of consent at any time by sending a corresponding notification to EASY SOFTWARE AG at .

Please provide this declaration during the registration process.

Security

Your personal data is transmitted over the internet in encrypted form. We protect our website and other systems by means of technical and organizational measures against loss, destruction, access, alteration or dissemination of your data by unauthorized persons. However, despite regular checks, complete protection against all risks is not possible.

If your personal data is already stored by EASY SOFTWARE AG, it will be transferred to a customer database. This is also done in encrypted form. Whenever contact is made via EASY SOFTWARE AG or its partners, your data in the customer database may be updated.

We use the Kadence Security plugin to protect our website against unauthorized access and to detect and defend against security threats. With regard to the possibility of withdrawing this consent, please refer to the section “Deletion and Data Autonomy” below.

WHICH CATEGORIES OF PERSONAL DATA ARE PROCESSED

During the registration process, we collect the following personal data:

• salutation
• first name
• last name
• email address
• company
• street
• postcode
• city
• country
• role
• department
• job title
• number of employees in the company
• industry
• ERP system
• telephone number

RECIPIENTS OF THE DATA AND TRANSFER TO A THIRD COUNTRY

For the purposes stated above, your data may be transferred to affiliated companies of EASY SOFTWARE AG. We also use the following services and will transfer data to them:

• HubSpot (USA), on the basis of the EU Standard Contractual Clauses or certification under the EU-U.S. Data Privacy Framework
• Microsoft Dynamics 365 Finance & Operations, on the basis of the EU Standard Contractual Clauses
• Salesforce, on the basis of server locations in Germany
• Microsoft SharePoint, on the basis of the EU Standard Contractual Clauses

RETENTION PERIOD

We will store the data until you expressly unsubscribe from receiving newsletters or other advertising communications.

PURCHASE OF A PRODUCT OR PROVISION OF SERVICES

PURPOSE OF DATA PROCESSING

If you commission us to provide a service, we generally collect and store your personal data only to the extent necessary for the provision of the service or the performance of the contract. We also use your email address to send you information relating to the products used as well as information concerning our product and consulting portfolio. The collection of this information is based on Article 6(1)(b) GDPR.

WHICH CATEGORIES OF PERSONAL DATA ARE PROCESSED

We collect the following personal data:

• salutation
• first name
• last name
• email address
• company
• street
• postcode
• city
• country
• role
• department
• job title
• number of employees in the company
• industry
• ERP system
• telephone number

RECIPIENTS OF THE DATA AND TRANSFER TO A THIRD COUNTRY

We use internal systems and the following providers for the various tasks:

• HubSpot (USA), on the basis of the EU Standard Contractual Clauses or certification under the EU-U.S. Data Privacy Framework
• Microsoft Dynamics 365 Finance & Operations and SAP Business ByDesign (Germany), on the basis of the EU Standard Contractual Clauses
• Salesforce, on the basis of server locations in Germany
• Microsoft SharePoint (Germany), on the basis of the EU Standard Contractual Clauses

Within the group of companies, we transfer the data to affiliated companies for the purpose of fulfilling an order.

Where necessary for data protection reasons or for other reasons, we will terminate cooperation with individual providers or add new providers, while maintaining the required data protection standards.

RETENTION PERIOD

We retain the data required for the execution and processing of a contractual relationship in accordance with the mandatory retention periods under commercial and tax law. If the contractual relationship is no longer active, the data record is marked as inactive and is no longer actively used. After expiry of the statutory retention period, the data is deleted or blocked.

TRANSMISSION OF DATA FOR APPLICATION PURPOSES

PURPOSE OF DATA PROCESSING

We process your data exclusively for the purpose of conducting the application process and deciding whether to establish an employment relationship (Article 6(1), first sentence, point (b) GDPR in conjunction with Section 26(1) BDSG).

CONSENT WHEN USING THE WEB FORM

If you submit your application to us via our web form, you consent to the processing of your data as follows:

Consent to data processing in accordance with our Privacy Policy: “I consent to EASY SOFTWARE AG using the personal data I provide here for the purpose of conducting the application process and contacting me for these purposes by email, including on a regular basis, or by telephone. I consent to EASY SOFTWARE AG transferring this data to its affiliated companies for the purposes stated above.” You may withdraw this declaration of consent at any time by sending a corresponding notification to EASY SOFTWARE AG at .

hCaptcha

We use the hCaptcha service on our website to secure application forms and protect them against automated access, such as spam and abuse. When hCaptcha is used, technical information such as the IP address, information about the browser, operating system and end device used, as well as interaction data with the hCaptcha system, may be processed. This data is transmitted to the provider of hCaptcha.

Processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in protecting our website against spam, abusive requests and automated attacks, and in ensuring the functionality of our online services.

Processing is carried out to verify whether entries on our website are made by a natural person and to protect our forms and online services against automated access, spam and abuse.

The data processed by hCaptcha is stored only for as long as is necessary to fulfill the purposes stated. The specific retention period is governed by the requirements of the provider hCaptcha.

You may prevent processing by hCaptcha by not using the relevant functions, such as protected forms, or by rejecting processing via our cookie management tool. Please note that this may restrict the use of certain functions, in particular protected forms.

TRANSMISSION OF DATA BY EMAIL

If you submit the data by email, we process the data on the basis of a legitimate interest. By submitting the data by email, you implicitly expect that we will also process the data electronically on the recipient side.

SECURITY

After the data has been transmitted to us, it is stored in a human resources information system. Access to the transmitted data is granted only to those directly involved in the procedure. Access to the data is granted solely to participants on a need-to-know basis.

WHICH CATEGORIES OF PERSONAL DATA ARE PROCESSED

We collect the following data:

• salutation
• first name
• last name
• email address
• company
• street
• postcode
• city
• country
• job title
• cover letter
• certificates and references
• curriculum vitae / résumé
• and any additional attachments, where provided to us.

RECIPIENTS OF THE DATA AND TRANSFER TO A THIRD COUNTRY

The data is processed exclusively within the EASY Group. No further transfer takes place.

RETENTION PERIOD

After completion of the procedure, the data will be retained for a maximum of four months. If employment is commenced, the data will be transferred to the personnel file.

DELETION AND DATA AUTONOMY

You may request information from EASY SOFTWARE AG at any time about the personal data stored about you and may request the rectification, erasure or restriction of processing of such data at any time. You may also amend or withdraw any declaration of consent you have given at any time, without stating reasons, with effect for the future. You will not incur any costs for doing so other than postage costs or transmission costs.

Consent may be withdrawn at any time by sending a corresponding notification, by post or by email, to EASY SOFTWARE AG at .

An objection to the purposes referred to above has no effect on your contractual relationship with EASY SOFTWARE AG.

DATA PORTABILITY

Data subjects have the right to receive the data that originates directly from them. Upon explicit request by the data subject, we will provide this data in a structured, commonly used and machine-readable format. Proof of the data subject’s identity is required.

Hosting (WebCoding24)

We host this website with WebCoding24 GmbH, Germany. Processing is carried out under a data processing agreement pursuant to Article 28 GDPR. The servers are located within the European Union.

RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

If you believe that your privacy rights have been violated, you may have the right to submit a complaint to the appropriate regulatory authority in the United States. Depending on the applicable federal or state privacy law, complaints may be directed to the Federal Trade Commission (FTC), the Attorney General of the relevant U.S. state, or another competent privacy regulator with jurisdiction over the matter.

For general consumer privacy and data protection concerns, you may contact the Federal Trade Commission (FTC):
https://www.ftc.gov/

Residents of certain U.S. states may also have the right to lodge a complaint with their respective state Attorney General’s Office or other designated state privacy authority, such as the California Privacy Protection Agency (CPPA), where applicable.

Additional information regarding your rights and the appropriate authority for your jurisdiction can be obtained from your state’s consumer protection or privacy regulator.

CONTACTS

Data Protection Officer:
datarea GmbH
Meißner Straße 103
01445 Radebeul
Germany

Postal address:
EASY SOFTWARE
Data Protection Officer
Jakob-Funke-Platz 1
45127 Essen
Germany

Mail:

LEGAL REPRESENTATIVES

Member of the Management Board:
Andreas Zipser (CEO)
Ulrich Edelmann (CFO)

Jakob-Funke-Platz 1
45127 Essen
Germany

District Court Duisburg HRB 33965