As the operator of this site, the Layer Software GmbH ("Layer Software GmbH" or "we") takes the protection of your personal data very seriously. The protection of your privacy when processing personal data is an important concern for us. In the following, we would like to inform you about which data we collect and process when you visit our Internet presence (hereinafter also referred to as "website") or use the services we offer elsewhere (hereinafter also referred to as "services").
Responsible in the sense of the EU data protection basic regulation (DSGVO) is:
Layer Software GmbH
Data protection officer
Our data protection officer is the
heyData UG (limited liability),
Landsberger Strasse 155,
- Logging of non-personal data when using our Internet presence
- Collection and use of personal data
- Legal basis for the processing
- Data transmission to third parties
- Transfer of data to third countries
- Storage period, deletion of personal data
- your rights
- Right of appeal to the competent supervisory authority
- Data security
- Contact form
The basic rule is:
Data is personal if it can be assigned to a specific or determinable person. This includes information such as name, postal and e-mail address or telephone number, but also usage data such as your IP address.
Logging of non-personal data when using our Internet presence
When you call our website, information about this is stored and processed in a log file. This process is anonymous. Conclusions about your person are not possible.
Depending on the access protocol used, the protocol data record contains information with the following contents:
- Date and time of the page call
- IP address of the requesting device
- access methods/functions required by the requesting device
- the called function or the name of the called file
- Operating system and browser type or browser settings
- the amount of data transferred and the message whether the access/retrieval was successful
There is no possibility for us to link IP address and possibly existing personal data. The stored data is used exclusively for the purpose of identifying and tracking unauthorised attempts to access the web server and for statistical evaluations such as visitor numbers and page popularity and to improve our online service. These data are used exclusively by us. It is not passed on to third parties.
On our website you have the possibility to subscribe to a free newsletter. The data provided during registration will be processed exclusively for sending the newsletter. The legal basis for this data processing is Art. 6 (1) lit. a) DSGVO.
You can object to this use of your e-mail address at any time by sending a message to the contact option described below or via a link provided for this purpose in the newsletter.
Collection and use of personal data
In order to enable us to provide certain services, the collection of personal data is unavoidable. We then request and store your inventory data (name, address and company name), your contact data (e.g. e-mail, telephone numbers and medical information (e.g. existing illnesses and medication)
If you provide us with personal data for the purpose of contacting you, this data will only be stored by us for as long as it is necessary for the purpose of the respective communication and contact. As soon as the personal data is no longer required by us for these purposes and there is no longer any obligation to keep it for a longer period, it will be deleted immediately.
We use the collected data to answer your inquiries, for service and customer care and to comply with legal requirements. In order to provide our services to you, it may be necessary to pass on your personal data to companies that we use to provide the service or to process the contract. These are, for example, operators of medical services, technicians, IT and hosting service providers, payment service providers, operators of merchandise management systems.
You can revoke your declaration of consent given to us at any time and object to the creation of user profiles at any time with effect for the future. In addition, you can also object to the use of your personal data for postal marketing measures, for example, to the extent permitted by law. In both cases an e-mail to the following address is sufficient: email@example.com.
Legal basis for the processing
In accordance with Art. 13 DSGVO, we inform you of the legal basis of our data processing. The legal basis for the processing depends on the purpose for which the data are processed.
If you have given us your consent for the processing of your personal data, we will base the data processing on the consent you have given us in accordance with Art. 6 Para. 1 letter a) DSGVO.
However, the processing of your personal data may also be necessary for the following reasons, for example to fulfil a contract concluded with you or to carry out pre-contractual measures requested by you and to provide you with our services as well as to fulfil our legal obligations (Art. 6 para. 1 sentence 1 lit. a to c DSGVO). We also use your personal data in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO to pursue our legitimate interests, provided that your rights and freedoms do not prevail.
Transfer of data to third parties
Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if and to the extent necessary:
- you have given your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO,
- the disclosure pursuant to Art. 6 para. 1 sentence 1 letter f DSGVO is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
- there is a legal obligation to pass on the data in accordance with Art. 6 para. 1 sentence 1 letter c DSGVO, and
- this is required under Art. 6 para. 1 sentence 1 lit. b DSGVO for the processing of contractual relationships with you, such as in the case of transfer to external service providers who support us in our business operations.
Our employees and partners are obliged by us to maintain secrecy and to comply with data protection regulations.
Data transfers to third countries
- Transfer of personal data to countries which the European Commission considers to offer an adequate level of protection for personal data (so-called "adequacy finding");
- the use of specific contracts approved by the European Commission which ensure that personal data enjoy the same level of protection as they do in the EEA;
- transfer of personal data to a body that has a valid "Privacy Shield" certification, thereby providing a level of protection of personal data similar to the EU standard; or
- Transfer of personal data to a body that has established binding internal data protection rules that are equivalent to the EU level of protection of personal data. Storage period, deletion of personal data
The data processed by us will be deleted or restricted in their processing in accordance with articles 17 and 18 DSGVO. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage obligations. If the data are not deleted because they are required for other and legally permissible purposes, their processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
You are entitled to various rights in relation to data concerning your person. You have a right to receive, free of charge and upon request, information about the personal data we have stored about you, a right to correct, delete or restrict the processing of this data and a right to object to the processing. Whether and to what extent these rights apply in individual cases and which conditions intervene is determined by the DSGVO and the Federal Data Protection Act. According to the DSGVO, you also have a fundamental right to data transferability. Furthermore, if you give your consent to the processing of your personal data, this consent can be revoked at any time with effect for the future.
If you have any questions, comments or requests regarding the collection, processing, use or deletion of your personal data by us, please contact MAIL
Right of appeal to the competent supervisory authority
As a data subject, you have the right to complain to the competent supervisory authority in the event of a breach of data protection law. The competent supervisory authority with regard to data protection issues is the State Data Protection Commissioner of the federal state in which our company is located.
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognise an encrypted connection by the "https://" address line of your browser and the lock symbol in the browser line.
All data to be processed in connection with the operation of this website is stored during hosting. This is necessary to enable the operation of the website. We process the data accordingly on the basis of our legitimate interests in accordance with Art. 6 para. 1 f) DSGVO. In order to provide our service, we use the services of web hosting providers to whom we transfer the above-mentioned data.
Data transmitted via the contact form will be stored including your contact data in order to be able to process your enquiry or to be available for follow-up questions. These data will not be passed on without your consent.
The data entered in the contact form will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). A revocation of your already given consent is possible at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing operations carried out up to revocation remains unaffected by revocation.
Data transmitted via the contact form will remain with us until you request us to delete it, revoke your consent to its storage or until there is no longer any need for data storage. Mandatory legal provisions - in particular retention periods - remain unaffected.
In the operating system settings of your device you will find the option to deactivate cookies. Deactivating cookies may result in limited functionality of our website. The setting of cookies, which are necessary for the performance of electronic communication processes or the provision of certain functions requested by you, is based on Art. 6 Para. 1 letter f DSGVO. As operators of this website, we have a legitimate interest in the storage of cookies for the technically error-free and smooth provision of our services. If other cookies are set (e.g. for analysis functions), these will be treated separately in this data protection declaration.
We use the Hotjar web analytics service provided by Hotjar Ltd, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta (hereinafter Hotjar). Hotjar uses, among other things, cookies, i.e. small text files that are stored locally in the cache of your web browser on your end device and that enable an analysis of your use of our online presence. Personal data can be stored and evaluated, especially the activity of the user (especially which pages have been visited and which elements have been clicked on), device and browser information (especially the IP address and the operating system) and a tracking code (pseudonymized user ID). The information collected in this way is transferred by Hotjar to a server in Ireland and stored there in anonymised form.
Further information on how Hotjar processes the data can be found here: https://www.hotjar.com/legal/policies/privacy
The use of the Hotjar plug-in serves to better understand the needs of our users and to optimize the offer on this online presence.
The legal basis for the processing of the users' personal data is generally the user's consent in accordance with Art. 6 Para. 1 S.1 lit. a DSGVO.
You can prevent the collection and processing of your personal data by Hotjar by preventing the storage of third-party cookies on your computer, by using the ""Do Not Track"" function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. With the following link you can deactivate the use of your personal data by Hotjar: https://www.hotjar.com/legal/compliance/opt-out For more information on how to appeal and remedy Hotjar, please see https://www.hotjar.com/legal/policies/privacy
We use HubSpot, a software from HubSpot Inc., USA, for our online marketing activities. This software is used for inbound marketing and helps us to better coordinate our marketing strategy and to optimize the content provided to you by means of statistical analyses and evaluations of the logged user behavior. Cookies are used for this purpose.
Legal basis for data processing
The legal basis for the processing of users' personal data is Art. 6 para. 1 letter f DSGVO.
Purpose of data processing
The use of Hubspot helps us to constantly improve our websites and their usability. These purposes also include our legitimate interest in processing data in accordance with Art. 6 para. 1 lit. f DSGVO. By making the IP address anonymous, the interest of users in their protection of personal data is sufficiently taken into account.
Duration of storage
The data is deleted as soon as it is no longer required for our recording purposes. In our case, the data is not automatically deleted, since according to Art. 6 para. 1 lit. F DSGVO there is a legitimate interest in data processing and the data is needed to allow historical user data to be used for the creation of target groups (e.g. for remarketing) for any length of time. Furthermore, long-term analyses and well-founded optimisations can be carried out, for example.
Possibility of contradiction and elimination
If you do not wish the information about your visit to be used for the purposes described, you are welcome to inform us of this at any time by e-mail or by post. All information collected by us is subject to this data protection regulation. HubSpot is subject to TRUSTe™'s Privacy Seal and the U.S. - EU Privacy Shield Framework and the U.S. - Swiss Privacy Shield Framework. Contact Us: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, telephone: +353 1 5187500.
On our Web site, we use a content delivery network ("CDN") provided by technology service provider Fastly Inc, 475 Brannan St. #300, San Francisco, CA 94107, USA ("Fastly"). A Content Delivery Network is an online service that is used to deliver large media files (such as graphics, page contents or scripts) through a network of regionally distributed servers connected via the Internet. The use of Fastly's Content Delivery Network helps us to optimise the loading speed of our website.
The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in a secure and efficient provision, as well as improvement of the stability and functionality of our website.
Fastly, based in the USA, is certified for the us-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
We use Google Analytics to analyze website usage. The resulting data is used to optimise our website and advertising measures.
Google Analytics is a web analysis service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States). Google processes the data for website use on our behalf and is contractually obliged to take measures to ensure the confidentiality of the processed data.
During your visit to the website, the following data, among others, is recorded:
- Pages viewed
- The achievement of ""website objectives (e.g. contact requests and newsletter subscriptions)
- Your behaviour on the pages (for example clicks, scrolling behaviour and dwell time) Your approximate location (country and city)
- Your IP address (in abbreviated form, so that no clear assignment is possible)
- Technical information such as browser, Internet provider, terminal device and screen resolution
- Source of your visit (i.e. via which website or advertising medium you came to us) This data is transferred to a Google server in the USA. Google complies with the data protection regulations of the "EU-US Privacy Shield" agreement.
Google Analytics stores cookies in your web browser for a period of two years since your last visit. These cookies contain a randomly generated user ID with which you can be recognised during future visits to the website.
The recorded data is stored together with the randomly generated user ID, which enables the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregated form for an unlimited period.
If you do not agree with the collection, you can prevent this by installing a browser add-on once to deactivate Google Analytics.
Google Tag Manager
We use the Google Tag Manager (https://www.google.com/intl/de/tagmanager/) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). The Google Tag Manager allows you to manage and bundle tags from Google's and third party services and embed them into an online presence. Tags are small pieces of code on an online presence that can be used to measure traffic and behavior, measure the impact of online advertising and social channels, use remarketing and targeting, and test and optimize online presence. When a user visits the online presence, the current tag configuration is sent to the user's browser. It contains instructions on which tags should be triggered. Google Tag Manager will trigger other tags that may collect data. Please refer to the sections on the use of these services in this privacy statement for more information. Google Tag Manager does not access this data.
The purpose of the processing of personal data is the collected and clear management and efficient integration of the services of third parties.
The legal basis for the processing of users' personal data is in principle the user's consent in accordance with Art. 6 para. 1 sentence 1 letter a DSGVO.
You have the right to revoke your data protection declaration of consent at any time. Revocation of your consent does not affect the legality of the processing that has taken place on the basis of your consent until revocation.
You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, by using the "Do Not Track" function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
You can also prevent the collection of the data generated by the cookie and related to your use of the online presence (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link https://tools.google.com/dlpage/gaoptout?hl=de
With the following link you can deactivate the use of your personal data by Google: adssettings.google.com
You can find further information about objection and removal options vis-à-vis Google at https://policies.google.com/privacy?gl=DE&hl=de
This website uses Mailjet to send newsletters. The provider is Mailjet SAS, 13-13 bis, Rue de l'Aubrac - 75012 Paris, France Mailjet is a service that allows you to organize and analyze the sending of newsletters. The data you enter to subscribe to the newsletter (e.g. e-mail address) is stored on Mailjet's servers in the EU.
Our newsletters sent with Mailjet enable us to analyse the behaviour of the newsletter recipients. Among other things, it is possible to analyse how many recipients opened the newsletter message and how often which link in the newsletter was clicked on. Conversion tracking can also be used to analyse whether a previously defined action (e.g. purchase of a product on our website) was carried out after clicking on the link in the newsletter. Further information on data analysis by Mailjet-Newsletter can be found at: mailjet.de/funktion/tracking-tools Mailjet also allows us to divide newsletter recipients into different categories ("segmentation"). The newsletter recipients can be divided according to the data provided during registration. In this way, the newsletters can be better adapted to the respective target groups.
Detailed information about the functions of Mailjet can be found in the following link: mailjet.com/function.
The data processing is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time by unsubscribing to the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
If you do not wish to receive an analysis by Mailjet, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. Furthermore, you can also unsubscribe the newsletter directly on the website.
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of Mailjet after you have unsubscribed from the newsletter. Data that has been stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this.
For further details, please refer to the information on "Security and data protection" of Mailjet at mailjet.de/sicherheit-datenschutz and the data protection regulations of Mailjet at mailjet.de/privacy-policy.
Conclusion of a Data-Processing-Agreement
We have concluded a contract with Mailjet for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Mailjet.
Description and scope of data processing
We use the mailing tool MailChimp, an offer of the data provider The Rocket Science Group, LLC, 512 Means St., Suite 404 Atlanta, GA 30318, USA (hereinafter: "MailChimp"). If you have effectively subscribed to our newsletter, the following data will be processed by the servers of MailChimp: First name and surname, e-mail address, destination and time of travel, type of travel, registration process, date of birth, if applicable, and data about interactions with e-mails from Mapify. Mailchimp is certified according to the "Privacy Shield Framework" and thus meets the European standards for legally compliant processing of order data.
Legal basis for data processing
The legal basis for this data processing is Art. 6 para. 1 lit. b DSGVO.
Purpose of data processing
We process this information to provide the best and most reliable newsletter and email communications about Mapify services and offers.
Possibility of objection and removal
Intercom automatically deletes the IPs and geographical data of visitors who have not visited our website for 9 months.
You have the right not to be subject to a decision based solely on automated processing, including profiling, that has legal effect on you or significantly affects you in a similar manner. This shall not apply if the decision
- is necessary for the conclusion or performance of a contract between you and us,
- is authorised by Union law or the law of the Member States to which we are subject and that law provides for appropriate measures to safeguard your rights and freedoms and your legitimate interests; or
- with your express consent.