Privacy Policy

Digitalwerk Store

This Privacy Policy ("Privacy Policy") describes how Digitalwerk GmbH, Im Gewerbepark C15, 93059 Regensburg, Germany ("Digitalwerk", "we" or "us") processes your personal data on the Digitalwerk Store. ("Digitalwerk Store"). We will describe for which purposes and based on which legal grounds we process your personal data, how long we store your personal data and the rights that you have in relation to your personal data. If you have any further questions, you may contact us by using the contact details provided at the end of this Privacy Policy.

Overview

  1. Who is responsible for data processing on the Digitalwerk Store and how can you contact our data protection officer?
  2. How do we process your personal data?
  3. Do we use Cookies on the Digitalwerk Store?
  4. Does Digitalwerk transfer personal data to third parties?
  5. No automated decision making
  6. Data security
  7. Your statutory data protection rights

1 Who is responsible for data processing on the Digitalwerk Store and how can you contact our data protection officer?

Digitalwerk GmbH,
Im Gewerbepark C15,
93059 Regensburg, Germany

Phone: +49 (0)941/4662 4310
Email: info@digitalwerk.net

is the data controller within the meaning of the Regulation (EU) 2016/679 (General Data Protection Regulation – "GDPR") for processing your usage data as a visitor or registered member of the Digitalwerk Store and your registration data (e.g. your username, password, when you log in) as a registered member of the Digitalwerk Store.

You can contact our data protection officer at any time by e-mail at datenschutz@digitalwerk.net.

2 How do we process your personal data?

"Personal data" means any information relating to an identified or identifiable natural person (Arti-cle 4(1) GDPR). This includes, for example, your name, your email address, your log-in details, but also, for example, the fact that you are offering certain ADTF component software.

"Processing" means, inter alia, any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. We process your personal data for the purposes below.

2.1 Whenever you visit the Digitalwerk Store (refers to any visitor of our website)

Purpose and data categories Retention period Legal ground
You may surf on the Digitalwerk Store and view all sections that do not require registration. In order to display the Digitalwerk Store and its essential content such as search functions or images in your internet browser, we process your personal data. The purpose of this processing is to provide you with the Digitalwerk Store and to ensure the proper operation of the Digitalwerk Store. For this purpose, we process the following per-sonal data: time stamp of access, name of ac-cessed website or file, transferred data, information about the browser that you use, information about your operating system, your IP and device address ("Usage Data"). We process your Usage Data only as long as necessary to display the content of the Digitalwerk Store. Furthermore, we only process this data for the establishment, exercise or defence of legal claims, or until our statutory retention obligations have expired. The legal basis for the processing is Article 6(1)(f) GDPR (legitimate interest). This also matches your interest in using the Digitalwerk Store. We process the download numbers in order to provide the respective developers with helpful insight regarding the demand of their offerings, and to provide our visitors with userfriendly functions and information. This also matches your interest in a fast and easy navigation through the offerings in order to identify the right solution. Your interests are thus not overridden.

2.2 Registration as developer (refers only to registered members)

Purpose and data categories Retention period Legal ground
When you sign-up an account as a registered developer to the Digitalwerk Store or when you log-in, we process you’re the personal data that you enter into our registration form or otherwise provide us with in course and for the purpose of your registration; we further process the information that you have verified your email address ("Registration Data"). We process this data for the purpose of your registration, i.e. the creation of your developer account on the Digitalwerk Store, and your access of the functions contained therein (e.g. upload and offering of ADTF component software). We process your Registration Data during our contractual relationship regarding your use of the Digitalwerk Store and as long as it is necessary for the fulfilment of mutual obligation in connection with the Digitalwerk Store. Furthermore, we only process this data for the establishment, exercise or defence of legal claims, or until our statutory retention obligations have expired. We process your Registration Data in order to provide you with the Digitalwerk Store section for registered members, in particular to enable you to upload and share your offerings of ADTF com-ponent software. The legal basis for the processing is Arti-cle 6(1)(b) GDPR (contract performance).
We process the information regarding your verification of your email address in order to comply with our legal obligations. The legal basis is Article 6(1)(c) GDPR.

2.3 Display of content uploaded and posted by developers (refers only to registered mem-bers)

Purpose and data categories Retention period Legal ground
On the Digitalwerk Store, we provide the public with offerings of developers of ADTF component software, i.e. our registered members, which were uploaded and posted by these registered members to the Digitalwerk Store ("Developer Content").

The Developer Content includes:
  • information regarding the visibility of the ADTF component software on the Digitalwerk Store (e.g. public or restricted to certain groups or users);
  • company name of the registered mem-ber;
  • support point of contact of the regis-tered member (e.g. email address);
  • further explanatory information regarding the ADTF component software and/or the developer entity and any further information or data posted by the registered member which might include personal data.
We process your Developer Content during our contractual relationship regarding your use of the Digitalwerk Store and as long as it is necessary for the fulfilment of mutual obligation in connection with the Digitalwerk Store. Furthermore, we only process this data for the establishment, exercise or defence of legal claims, or until our statutory retention obligations have expired. We process your Developer Content in order to provide you with the Digitalwerk Store section for registered members and to perform our contract with you. The legal basis for the processing is Article 6(1)(b) GDPR (contract performance).

2.4 Whenever you contact us

Purpose and data categories Retention period Legal ground
Whenever you contact us (e.g. support requests via email or when you execute your data protection rights under the GDPR), we receive your personal data. Depending on the communication channel you use (e.g. telephone or email), this data may differ, but may include the following personal data: name, email address, phone number, information about your previous request, if applicable, and any other information you provide to us when you contact us as well as associated technical data ("Contact Data"). We process your Contact Data and such technical data exclusively to deal with your contact request. We process your Contact Data until we have answered your request and all questions are settled. Furthermore, we only process this data for the establishment, exercise or defence of legal claims, or until our statutory retention obligations have expired. We process your Contact Data in order to respond to your request. The legal basis for the processing is Article 6(1)(b) GDPR (contract performance).

2.5 IT security

Purpose and data categories Retention period Legal ground
We further process your Usage Data in order to securely operate the Digitalwerk Store. With regard to registered developers, we further process technical data regarding their registrations and every log-in (e.g. IP address and time stamp of registration and log-in). We process this data only as long as neces-sary in order to ensure IT security. Further-more, we only process this data for the estab-lishment, exercise or defence of legal claims, or until our statutory retention obligations have expired. Our interest in a secure and stable ADTF Com-ponent Store also matches your interest in the proper operation of the Digitalwerk Store and its functions. Your interests are thus not overridden. The legal basis for the processing is Arti-cle 6(1)(f) GDPR (legit-imate interest).

3 Do we use Cookies on the Digitalwerk Store?

We use cookies and similar technologies ("Cookies"). Cookies in this sense are small files or other technologies that allow us to learn how you use the Digitalwerk Store. This enables us, among other things, to offer you the Digitalwerk Store and to improve it.

As a user of the Digitalwerk Store and as data subject within the meaning of the GDPR, you may determine the use of Cookies. We only use technical cookies (session, remember me) and do not share any data with third parties.

4 Does Digitalwerk transfer personal data to third parties?

No.

5 No automated decision making

We do not use any decision making based solely on automated processing, including profiling, within the meaning of Article 22 GDPR.

6 Data security

We have implemented and maintain technical and organizational measures which protect our systems and your personal data against accidental or intentional manipulation, loss destruction or unauthorized access.

7 Your statutory data protection rights

You have a number of rights with regard to our processing of your personal data, provided that the respective statutory requirements are met. You may:

  • demand the confirmation as to whether we process personal data about you. If this is the case, you have the right to information about this personal data, as well as other information, e.g. the processing purposes, the recipients and the planned duration of storage or the criteria for determining the duration;
  • demand the rectification of your personal data;
  • demand the erasure of your personal data;
  • demand the restriction of the processing of your personal data;
  • at any time, in the case of direct marketing, object to the processing of your personal data for the purpose of such advertising, including profiling insofar as it is linked to such direct marketing or profiling; where the processing is based on our legitimate interests, you may object to the processing on grounds relating to your personal situation;
  • receive your personal data in a structured, common and machine-readble format (right to data portability); or
  • withdraw your consent at any time with effect for the future.

Furthermore, you have the right to be not subject to any decision making based solely on automated processing, including profiling, within the meaning of Article 22 GDPR.

You can find further information on your rights and the relevant requirements on the EU Commission’s website at https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens.

You also have the right to lodge a complaint with the competent supervisory authority if you think that the processing of your personal data violates the GDPR.

Version: November 25, 2020.