Privacy Policy and Cookie Policy

I. Controller

The controller as defined in the Regulation (EU) 2016/679 (General Data Protection Regulation), the data protection laws of the EU Member States, and any other legal regulations governing data protection is:

XPLM Solution GmbH
Altmarkt-Galerie Dresden
Altmarkt 25
01067 Dresden, Deutschland
Email: xplm@xplm.com
Website: https://www.xplm.com

– hereinafter referred to as: “we” / ”us” –

II. Data protection officer

The contact information of the data protection officer of the controller is:

XPLM Solution GmbH
Walter-Oehmichen-Str. 20
68519 Viernheim, Deutschland

E-Mail: dataprotection@xplm.com
Phone: +49 6204 98092 200

III. General information on the processing of personal data

1. Personal data

Personal data means any information relating to an identified or identifiable natural person (hereinafter: ‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

2. Scope of processing

Personal data is generally only processed by us to the extent necessary to provide a functional website and website content, as well as to provide our services.

3.  Legal basis for processing

If we obtain the permission of the data subject to process their personal data, processing is done in accordance with Art. 6(1) subparagraph 1 point (a) General Data Protection Regulation (GDPR).

If the processing of personal data is necessary in order to fulfil the requirements of a contract with the data subject, it is done in accordance with Art. 6(1) subparagraph 1 point (b) GDPR. This also applies to processing procedures performed before conclusion of the contract that are necessary to carry out measures taken upon the request of the data subject.

If the processing of personal data is necessary in order to meet a legal obligation we are subject to, Art. 6(1) subparagraph 1 point (c) GDPR forms the legal basis for this processing.

In the case that the processing of personal data is necessary in order to protect the vital interests of the data subject or another natural person, our right to process data is based on Art. 6(1) subparagraph 1 point (d) GDPR.

If it is necessary to process data in order to guard the legitimate interests of the controller or a third party and this outweighs the interests or fundamental rights and freedoms of the data subject, then Art. 6(1) subparagraph point (c) GDPR forms the legal basis for processing.

4. Storage period

We generally delete all personal data as soon as the reason for storing it expires.

We may, however, continue to store the data if this is allowed for by European Union or Member State lawmakers in EU-regulations, national laws, or other regulations we are subject to. In this case, the data is deleted as soon as a storage period specified in these legal standards has expired, unless it is necessary to continue storing the data in order to conclude a contract or fulfil the requirements of a contract with the person concerned.

IV. Provision of the website and generation of web server log files

1. Description and scope of data processing

Every time our website is accessed our system will automatically record data from the terminal device (such as: desktop computer, tablet, smartphone) and the internet connection of the user accessing the site.

The following data is collected in the process:

  • Type and version of the web browser used by the user
  • Type and version of the operating system used by the user
  • The IP address assigned to the user
  • Date and time of access
  • URL of the pages that are accessed on our website
  • The URL of the previously accessed website, if the user has been directed to our website by clicking a link or landed on our website through an automated process (so-called referrer)

The above data is also stored in our system’s web server log files. This data is stored separately from other collected or still to be collected personal data of the user.

2. Purpose of data processing

It is necessary for our system to temporarily store the IP address so that the website can be delivered to the user’s terminal device. For this purpose, the user’s IP address must be stored for the duration of the session.

Data is stored in the web server log files in order to ensure the functionality of the website. Furthermore, the data also allows us to optimize the website and ensure the security of our information technology systems.

This is our legitimate interest in data processing in accordance with Art. 6(1) subparagraph 1 point (f) GDPR.

3. Legal basis for data processing

The legal basis for temporarily storing data and web server protocol files is formed by Art. 6(1) subparagraph 1 point (f) GDPR.

4. Storage period

The data will be deleted as soon as it is no longer needed in order to reach the aforementioned goals.

When data is collected and stored for the purpose of making the website available to the user, deletion will consequently occur as soon as the respective session is over.

If data is stored in the web server log files, it will be deleted after 24 hours at the latest.

5. Prevention of further data processing by the data subject / premature deletion of the collected data

The collection of data in order to make the website available and the storage of data in web server log files are absolutely necessary for the operation of the website. Considering this, users do not have the right to object to such data collection, nor do they have the right to have the collected data deleted prematurely.

V. Use of cookies

1. Description and scope of data processing

Our website uses cookies. We use cookies to make our website more user-friendly. Cookies are text files that the web browser stores on the user's terminal device. When a user accesses a website, a cookie can be stored on the terminal device of the user. This cookie contains a unique character string that makes it possible to clearly identify the web browser when the website is accessed again.

Only login information is stored and transmitted in the cookies we place.

2. Purpose of data processing

We need cookies for the following applications:

  1. SIG login (member area for Special Interest Groups)
  2. Support Portal Login

Without cookies, users would have to enter and confirm their login information (user name, password) every time they switch pages (for example: click on a button). In order to avoid this, we need to use cookies for all features involved in providing the SIG login.

At the same time, these purposes also constitute a legitimate interest in processing personal data pursuant to Art. 6(1) subparagraph 1 point (f) GDPR.

The user data collected by technically essential cookies is not used to create user profiles.

3. Legal basis for data processing

The legal basis for processing personal data using cookies is constituted by Art. 6(1) subparagraph 1 point (f) GDPR.

4. Storage period / prevention of further data processing by the data subject / premature deletion of the collected data

As a user, you do in principle have full control over the use of cookies, which may still be limited in individual cases – depending on the functional scope of the web browser used. Specifically speaking, you can deactivate or limit the storage of cookies by changing the cookie settings in your web browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically.

If cookies are deactivated for our website, it may not be possible to use all of the features of the website to their full extent.

VI. Registration for SIG login (member area for Special Interest Groups)

1. Description and scope of data processing

On our website, we offer users the opportunity to register for SIG login by entering personal data.

Special Interest Groups (SIG) are informational events that we hold regularly for customers and partners addressing various topics associated with PLM.

During the registration process, data is entered into an entry form, transmitted to us, and stored.

The following data is collected during the registration process:

  • User group [meaning the SIG area(s) to be registered]
  • First name
  • Last name
  • Company
  • Email address
  • Password

During the course of the registration process, the user's consent is obtained for the data processing.

Prior to giving consent, the user is also informed of the right to withdraw consent at any time and that the lawfulness of processing based on consent before its withdrawal will not be affected by the withdrawal.

Furthermore, reference is made to the validity of the concrete privacy policy and to the fact that the user can view it at any time via the linked URL https://www.xplm.com/privacy-policy.

2. Purpose of data processing

User registration is necessary in order to provide certain content and services on our website.

Within the context of the SIG login, we provide interested companies with supplementary informational material, particularly on past events and topics.

Data collected during registration is used to assign every registered account to a legal and/or natural person with absolute certainty. Furthermore, data collection also serves the purpose of making specific information available to specific user groups.

Additionally, we also use the collected data to determine which user groups are especially interested in our services.

3. Legal basis for data processing

The legal basis for processing data is the consent given by the user pursuant to Art. 6(1) subparagraph 1 point (a) GDPR.

4. Storage period

The data will be deleted as soon as it is no longer needed for the purposes for which it was collected.

This is the case for data collected during the registration process when the registration for a SIG login is cancelled or modified.

5. Prevention of further data processing by the data subject / premature deletion of the collected data

If you have given your consent for the processing of personal data, you can withdraw it at any time. In order to withdraw a given consent, you can also use the contact form available on every page of our website or you can contact us directly via email, for instance at xplm@xplm.com.

Once you withdraw your consent, we will no longer process your personal data, unless there is a legal basis to process the data other than your consent, pursuant to Art. 6(1) subparagraph 1 point (a) GDPR.

The lawfulness of processing based on consent before its withdrawal will not be affected by the withdrawal.

Furthermore, you have the option to cancel your registration at any time by deleting the registered user account yourself through the account settings or letting us know that you want your registered user account deleted. You can also use the contact form available on every page of our website for such a notification or you can contact us directly via email, for instance at xplm@xplm.com.

In the first case, your user account as well as all data collected in relation to it will be immediately deleted, within 14 days at the latest, as long as there are no legal obligations that would prevent deletion.

In the case that the data stored about you is incorrect, incomplete, or there are other justified reasons to modify it, you can change the data – with the exception of the email address – at any time or have us change the data, either by changing the data yourself in your user account or informing us of your desire to change the data, specifying the data to be changed. In the latter case, we will perform the changes within 7 days. As soon as the changes have been made, the old data will be automatically deleted.

VII. Registration for the Support Portal

1. Description and scope of data processing

Moreover, we offer users of our website the possibility to register for our Support Portal, specifying personal data.

During the registration process, data is entered into an entry form, transmitted to us, and stored.

The following mandatory data is collected during the registration process:

  • First name
  • Last name
  • Email address
  • Company

The following data are collected during the registration process, if they are specified by the user voluntarily:

  • Title (indirect: Gender)

During the course of the registration process, the user's consent is obtained for the data processing.

Prior to giving consent, the user is also informed of the right to withdraw consent at any time and that the lawfulness of processing based on consent before its withdrawal will not be affected by the withdrawal.

Furthermore, reference is made to the validity of the concrete privacy policy and to the fact that the user can view it at any time via the linked URL https://www.xplm.com/privacy-policy.

2. Purpose of data processing

A registration of the user is required for the provision of specific content and services on our website.

Within the framework of our Support Portal we offer our clients various possibilities of the effective use of our Software-Support.

The data collected within the registration process serve the purpose of doubtlessly matching the registered user account with one of our clients. This serves the purpose of ensuring a specific support as well as determining if and under which modalities the respective user is entitled to the use of our support and services.

3. Legal basis for data processing

The legal basis for processing data is the consent given by the user pursuant to Art. 6(1) subparagraph 1 point (a) GDPR.

In case the processing of data serves the fulfillment of a contract with the relevant user, this constitutes additional legal grounds for data processing pursuant to Art. 6(1) subparagraph 1 point (b) GDPR.

4. Storage period

The data will be deleted as soon as it is no longer needed for the purposes for which it was collected.

This is the case for data collected during the registration process when the registration for the Support Portal is cancelled or modified.

5. Prevention of further data processing by the data subject / premature deletion of the collected data

If you have given your consent for the processing of personal data, you can withdraw it at any time. In order to withdraw a given consent, you can also use the contact form available on every page of our website or you can contact us directly via email, for instance at xplm@xplm.com.

Once you withdraw your consent, we will no longer process your personal data, unless there is a legal basis to process the data other than your consent, pursuant to Art. 6(1) subparagraph 1 point (a) GDPR.

The lawfulness of processing based on consent before its withdrawal will not be affected by the withdrawal.

Furthermore, you have the option to cancel your registration at any time by letting us know that you want your registered user account deleted. You can also use the contact form available on every page of our website for such a notification or you can contact us directly via email, for instance at xplm@xplm.com.

In this case your user account as well as all data collected in relation to it will be immediately deleted, within 14 days at the latest, as long as there are no legal obligations that would prevent deletion.

In the case that the data stored about you is incorrect, incomplete, or there are other justified reasons to modify it, you can have us change the data at any time by informing us of your desire to change the data, specifying the data to be changed. In this case, we will perform the changes within 7 days. As soon as the changes have been made, the old data will be automatically deleted.

VIII. Contact form and contact via email

1. Description and scope of data processing

There is a contact form on our website that can be used to contact us electronically. If a user decides to use this option, the data entered into the form will be transmitted to us and stored. The mandatory data required is:

  • The user’s email address

and – if the user decides to enter this additional information in individual cases:

  • First and last name
  • Phone number
  • Message text

Before the contact form is sent, your consent to process the data will be obtained.

Prior to giving consent, you will also be informed of your right to withdraw your consent at any time and that the lawfulness of processing based on your consent before its withdrawal will not be affected by the withdrawal.

Furthermore, reference is made to the validity of the concrete privacy policy and to the fact that it can be viewed at any time via the linked URL https://www.xplm.com/privacy-policy.

Contact can also be made via the email addresses made available for this purpose, particularly xplm@xplm.com. In this case, the personal data of the user transmitted with the email will be stored.

Reference is made to the applicability of this privacy policy in all emails sent by us. Furthermore, a link to the URL https://www.xplm.com/privacy-policy, where this privacy policy can be viewed at any time, is also clearly displayed behind the phrase “Privacy Policy”.

2. Purpose of data processing

The personal data from the contact form is used exclusively to process the contact attempt. In cases where contact is made via email, this is also our legitimate interest in processing the data.

3. Legal basis for data processing

The legal basis for processing data is the consent given by the user pursuant to Art. 6(1) subparagraph 1 point (a) GDPR.

The legal basis for processing data conveyed by the user by sending an email is formed by Art. 6(1) subparagraph 1 point (f) GDPR. If the user seeks to conclude a contract when they contact us via email, this constitutes additional legal grounds for data processing pursuant to Art. 6(1) subparagraph 1 point (b) GDPR.

4. Storage period

The collected data will be deleted as soon as it is no longer needed for the purposes for which it was collected. For personal data from the contact form and data sent via email, this is the case when the respective conversation with the user comes to an end. The conversation ends once it can be assumed from the circumstances, that the matter involved has been conclusively resolved.

5. Prevention of further data processing by the data subject / premature deletion of the collected data

The user can withdraw the consent given for the purpose of using the contact form at any time. If users contact us via email, they can object to the storage of their personal data transmitted in this respect at any time. In such cases, it will not be possible to continue the conversation.

Notification of withdrawal of consent given or objection to further processing of personal data can also be conveyed through our contact form or directly via email, for instance at xplm@xplm.com.

In the case of a withdrawal or objection, all personal data stored when contact is made will be deleted.

IX. Application form

1. Description and scope of data processing

Furthermore, we also provide an application form on our website that can be used for electronic applications (online applications). If a user decides to take advantage of this option, the data entered into the form will be transmitted to us and stored. The mandatory data required is:

  • Selection for the offered positions
  • Title (gender)
  • First and last name
  • Email address
  • Application text

and – if the user decides to upload this additional information in specific cases:

  • Application documents in electronic format

Before the contact form is sent, your consent to process the data will be obtained.

Prior to giving consent, you will also be informed of your right to withdraw consent at any time and that the lawfulness of processing based on consent before its withdrawal will not be affected by the withdrawal.

Furthermore, reference is made to the validity of the concrete privacy policy and to the fact that it can be viewed at any time via the linked URL https://www.xplm.com/privacy-policy.

2. Purpose of data processing

The personal data from the application form is used exclusively to process your application.

3. Legal basis for data processing

The legal basis for processing data is the consent given by the user pursuant to Art. 6(1) subparagraph 1 point (a) GDPR.

Since the application aims to conclude an employment contract, this constitutes an additional legal basis for data processing pursuant to Art. 6(1) subparagraph 1 point (b) GDPR.

4. Storage period

The collected data will be deleted as soon as it is no longer needed for the purposes for which it was collected. This is the case for personal data from the application form, when the respective application has ended. An application has ended once it can be assumed from the circumstances that the affected matter has been conclusively resolved.

5. Prevention of further data processing by the data subject / premature deletion of the collected data

The user can withdraw the consent given while using the application form at any time. In this case, it will not be possible to continue processing the application.

Notification of withdrawal of consent given can also be conveyed to us through the contact form available on every page of our website or directly via email, for instance at xplm@xplm.com or jobs@xplm.com.

In the case of a withdrawal, all personal data stored during the course of the application will be deleted.

X. Google Services

1. Google Services

We use content or services offered by “Google” (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) on several of our pages. It is necessary for the perception and use of our website that Google, as the provider of the content, will receive your IP address. In addition, Google may store cookies on your device, which may contain technical information about the browser and operating system, referrer URL and other information about the use of our website, and such information may be merged with information from other sources. For more information, please refer to Google’s privacy policy at https://www.google.com/intl/de/policies/privacy/partners; an opt-out option is available at: https://adssettings.google.com/authenticated

For the special cases in which personal data is transferred to Google to the USA, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. This provides ample assurance within the meaning of the GDPR that your data will be processed under conditions providing a data protection standard equivalent to the one applied in the EU for similar processing.

The following Google services on our websites are used in accordance with Art. 6 para. 1 lit f) GDPR based on our legitimate interest to a statistical analysis of user behavior for the purpose of optimization and marketing reasons. Insofar as cookies are used in this context, they are processed based on your consent in accordance with Art. 6 para. 1 lit a) GDPR.

2. Google Analytics

This offer uses Google Analytics, a web analysis service from Google. Google Analytics uses cookies that enable an analysis of your use of this website. We use Google Analytics exclusively with the extension “Anonymize-Ip”, which ensures an anonymization of your IP address and eliminates the possibility of direct personal reference to you. In some rare cases, you full IP address may be transmitted to a Google server in the USA and truncated there.

Google utilizes this information to evaluate the use of the website by users in order to compile reports on website activities and to provide the website operator with further services associated with the use of the website and of the Internet. The IP address transmitted by your browser as used in the context of Google Analytics is not merged with other Google data.

Users may reject cookies by selecting the respective settings in their browser software; in this case, however, you may not be able to use the full functionality of this website. Users may also choose to decline the collection of data generated by the cookie and relating to their use of the website (including their IP address) and its processing by Google through the download and installation of the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

As an alternative to the browser add-on or within browsers on mobile devices, please click this link,… to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie will be stored on your device. If you delete your cookies, you will have to click this link again.

For more information, please refer to the following links

https://www.google.com/analytics/terms/de.html

https://www.google.com/intl/de/analytics/learn/privacy.html

3. Google Ads (Google Adwords)

Name Storage Function
ads/ga-audiences session This cookie Is used by Google Ads to store information for remarketing purposes or to regain visitors to our website based on their online behavior.
_gcl_au 3 months Google Ads uses this cookie to improve the display and advertising efficiency on the website.

Disclosure

For further information please read the Google Ads - terms and conditions.

XI. Vidalytics

1. Description and scope of data processing

We also use the service Vidalytics, which is Vidalytics LLC, located in 340 S Lemon Ave. #5050, Walnut, CA 91789, USA. When viewing the videos visible on our website, the user behavior is transmitted to Vidalytics LLC. Vidalytics LLC uses this data for the purpose of evaluation for advertising and market research.

2. Purpose of data processing

We use Vidalytics to include videos on our website to make our offer more interesting and to improve the user experience for our users.
Herein lies our legitimate interest in the simultaneous processing of your data by Vidalytics.

3. Legal basis for data processing

The data processing takes place on the basis of your consent and is therefore freely revocable at any time. Insofar as we obtain the consent of the person concerned to the processing of personal data, Article 6 paragraph 1 letter a DSGVO forms the legal basis.
You have the right of objection against Vidalytics. To exercise this right, please contact Vidalytics. 
For further information we refer to the following privacy policy: vidalytics.com/privacy

4. Prevention of further data processing by the data subject / premature deletion of the collected data

If you want to prevent the processing of your personal data as far as possible, you should not play the embedded videos on our website. 
Furthermore, you can object to the processing of your personal data, especially if this is done to create user profiles.

XII. Rights of the data subject

If your personal data is processed, you are considered a data subject as defined by GDPR. You are at the same time entitled to the following rights in relation to the controller (us):

1. Right of access

You can receive confirmation from us of whether we are processing personal data relating to you.

In the case that we are processing personal data relating to you, you can require access to this personal data and the following information:

  • the purposes of the processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
  • the right to lodge a complaint with a supervisory authority;
  • where the personal data are not collected from the data subject, any available information as to their source;
  • the existence of automated decision-making, including profiling, referred to in Art. 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

Furthermore, you also have the right to request information on whether the personal data relating to you are transmitted to a third country or to an international organization. Where personal data are transferred to a third country or to an international organization, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer.

2. Right to rectification

If personal data we are processing relating to you are inaccurate, you have the right to obtain without undue delay the rectification.

Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

3. Right to restriction of processing

You can require that we restrict the processing of personal data relating to you, if

  • you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;
  • the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
  • we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims;
  • you have objected to processing pursuant to Art. 21(1) GDPR pending the verification whether our legitimate grounds outweigh yours.

If the processing of personal data relating to you has been restricted, this data – aside from its storage – will only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

If the processing has been restricted, we will inform you before the restriction of processing is lifted.

4. Right to erasure (‘right to be forgotten’)

a) Obligation to erase

You can require that we erase the personal data relating to you without undue delay and we are obligated to erase this data without undue delay as long as one of the following grounds apply:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • you withdraw your consent on which the processing is based according to Art. 6(1) subparagraph 1 point (a), or Art. 9(2) point (a) GDPR and there is no other legal ground for the processing;
  • you object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR;
  • the personal data have been unlawfully processed;
  • the personal data have to be erased for compliance with a legal obligation in the law of the European Union or Member States to which we are subject;
  • the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

b) Information to third parties

If we have made the personal data public and are obliged pursuant to Art. 17(1) GDPR to erase the personal data, we, taking account of available technology and the cost of implementation, are obliged to take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

c) Exceptions

The right to erasure does not apply to the extent that processing is necessary:

  • for exercising the right of freedom of expression and information;
  • for compliance with a legal obligation which requires processing by European Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
  • for reasons of public interest in the area of public health in accordance with Art. 9(2) points (h) and (i) as well as Article 9(3) GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89(1) GDPR in so far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  • for the establishment, exercise or defense of legal claims.

5. Right to information

We are obliged to communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Art. 16, Art. 17(1) and Art. 18 GDPR to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.

You have the right to be informed about those recipients if you require it.

6. Right to data portability

You have the right to receive the personal data relating to you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, where the processing:

  • is based on consent pursuant to Art. 6(1) subparagraph 1 point (a) GDPR or Article 9(2) GDPR or on a contract pursuant to Art. 6(1) subparagraph 1 point (b) GDPR; and
  • the processing is carried out by automated means.

That right shall not adversely affect the rights and freedoms of others.

In exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible.

The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

7. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data relating to you which is based on Art. 6(1) subparagraph 1 point (e) or (f) GDPR, including profiling based on those provisions.

We no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which overweigh your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data relating to you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Where you object to processing for direct marketing purposes, we will no longer process your personal data for such purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

8. Right to Withdraw the Consent to the Processing of Personal Data

If you have given consent to processing of your personal data for one or more specific purposes, you have the right to withdraw your consent at any time.

The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

9. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.


Cookie Policy (EU)

This cookie policy statement was last updated on 24 August 2020 and applies to the nationals of the European Economic Zone member-states.

 

1. Introduction

Our website, https://www.xplm.com/de/ (“Website”), uses cookies and similar technologies (for the sake of simplicity, all of these are further termed as “Cookies”). Cookies are also placed by third parties commissioned by us. This document is intended to inform you about the use of cookies on our website.

2. What is a cookie?

A cookie is a small text file that is sent together with the pages of an Internet address and can be stored by the web browser on the PC or another device. The information stored therein can be sent to our servers or to those of relevant third-party providers during subsequent visits.

3. Consent

When you visit our website for the first time, you will see a pop-up field with an explanation about cookies. By clicking on “Accept cookies” you give us your consent to use all categories of cookies and plugins you have chosen, as described in this cookie policy statement. You can deactivate the use of cookies in your browser, but please note that our website may not function properly in this case.

 

4. Cookies

4.1 Technical or functional cookies

Some cookies ensure that parts of our website function properly and that your user preferences are known to us. We make it easier for you to visit our website through placement of functional cookies. This way you do not have to enter the same information repeatedly when you visit our website. Placement of such cookies does not require your consent.

4.2 Analytical cookies

We use analytical cookies to optimize your website experience. This gives us insights into your use of our website. Statistical data are collected anonymously and thus no permission is required to place analytical cookies.

4.3 Advertising cookies

We use advertising cookies on this website to gain insight into campaign results and to adapt our advertising to your interests (make it more targeted). A profile is created and the cookies are linked to a particular ID - so that we do not show you the same advertisement several times.

Since these cookies are marked as tracking cookies, we need your consent in order to be able to place them.

4.4 Social media buttons

We do not use social media buttons on our website to rate websites or to share them in social networks.

 

5. Cookies used

Essential cookies

Cookie name

typo3_fe_user

Storage

End of session

Function

This cookie is linked to the Typo3 web content management system. It is generally used as a session identifier to enable saving of user preferences. In many cases, however, it is not really needed because the platform can place it by default - although website administrators can prevent this from happening. In most cases it is placed to be destroyed at the end of the browser session. It contains a random identifier and no specific user data.

Transfer

These data are not shared with third parties.

 

Functional, advertising and analytical cookies

LinkedIn

We use LinkedIn to advertise our content and to display relevant topics of interest to you (targeting).

Name

bcookie

Storage

2 years

Function

To save browser details

Purpose: Marketing

 

Name

X-LI-IDC

Storage

Session

Function

To provide cross-page functionality

 

Name

lidc

Storage

1 day

Function

To save actions performed on the website

 

Name

UserMatchHistory

Storage

30 days

Function

To enable ad delivery or retargeting

 

Name

LinkedIn Insight Tag

Storage

6 months

Function

Tracks conversions and interaction with LinkedIn ads

 

Name

lang

Storage

Session

Function

For automatic language selection when navigating through the pages

 

Transfer

Linkedin may combine your personal data with other data and may associate this data with other data such as search history, personal accounts, usage data from other devices, and any other data that Linkedin has about you. This data could be made available to third parties. According to the legal framework of the European Union, an adequate level of data protection cannot be guaranteed, as access by US authorities, in particular US intelligence services, cannot be ruled out.

For more information, please refer to LinkedIn privacy policy.

 

Google Analytics

Note: The list below does not claim to be complete because Google frequently changes the range of their cookies.

We use Google Analytics for website statistics.

Name

_ga

Storage

2 years

Function

For storage of a unique user ID

 

Name

_gid

Storage

1 day

Function

For counting and tracking page viewings

 

Name

_gat

Storage

Session

Function

For filtering of requests from bots and collecting data on the number of visits

 

Marketing

Name

DoubleClick Cookies

Function

These types of cookies are used for retargeting so that we can show you relevant ads based on your activity on our website after you have left it. The data collected includes an identifier and sometimes your geolocation, device type and IP address.

 

Name

(IDE, DSID)

Storage

2 years

Function

These types of cookies are used for retargeting so that we can show you relevant ads based on your activity on our website after you have left it. The data collected includes an identifier and sometimes your geolocation, device type and IP address.

 

Name

1P_JAR

Storage

30 days

Function

A Google advertising cookie that is used for user tracking and ad targeting

 

Transfer

Google may combine your personal data with other data and may associate this data with other data such as search history, personal accounts, usage data from other devices, and any other data that Google has about you. This data could be made available to third parties. According to the legal framework of the European Union, an adequate level of data protection cannot be guaranteed, as access by US authorities, in particular US intelligence services, cannot be ruled out.

For more information, please refer to Google Privacy Policy.

 

Google Tag Manager

We use Google Tag Manager to manage website statistics.

Name

uslk_s

Storage

Session

Function

Our website uses Google Tag Manager to collect data. These data are then sent to the appropriate analytical tool.

 

Name

uslk_e

Storage

1 year

Function

Our website uses Google Tag Manager to collect data. These data are then sent to the appropriate analytical tool.

 

Name

_gat_UA-*

Storage

1 day

Function

Our website uses Google Tag Manager to collect data. These data are then sent to the appropriate analytical tool.

 

Transfer

Google may combine your personal data with other data and may associate this data with other data such as search history, personal accounts, usage data from other devices, and any other data that Google has about you. This data could be made available to third parties. According to the legal framework of the European Union, an adequate level of data protection cannot be guaranteed, as access by US authorities, in particular US intelligence services, cannot be ruled out.

For more information, please refer to Google Privacy Policy.

 

Google Ads (Google Adwords)

We use Google Ads for marketing and optimization purposes and to advertise on the Google search results page.

Name

ads/ga-audiences

Storage

Session

Function

This cookie Is used by Google Ads to store information for remarketing purposes or to regain visitors to our website based on their online behavior.

 

Name

_gcl_au

Storage

3 months

Function

Google Ads uses this cookie to improve the display and advertising efficiency on the website.

 

Transfer

Google may combine your personal data with other data and may associate this data with other data such as search history, personal accounts, usage data from other devices, and any other data that Google has about you. This data could be made available to third parties. According to the legal framework of the European Union, an adequate level of data protection cannot be guaranteed, as access by US authorities, in particular US intelligence services, cannot be ruled out.

For further information please read the Google Ads - terms and conditions.

 

Facebook Pixels

We use Facebook Pixels to analyse the effectiveness of Facebook campaigns.

Name

_fbp

Storage

3 months

Function

Visitor identification, ad targeting and ad display

 

Name

fr

Storage

3 months

Function

Process functionality

 

Transfer

As a Facebook user, you can control cookie behaviour here: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen 

If you have no Facebook account, you can deactivate usage-based ads on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

Facebook may combine your personal data with other data and may associate this data with other data such as search history, personal accounts, usage data from other devices, and any other data that Facebook has about you. This data could be made available to third parties. According to the legal framework of the European Union, an adequate level of data protection cannot be guaranteed, as access by US authorities, in particular US intelligence services, cannot be ruled out.

If you want to know more about Facebook data protection, please refer to: https://www.facebook.com/policy.php.

 

Vidalytics

We use Vidalytics to integrate and analyse videos.

 

Name

__cfduid

Storage

Session

Function

Assessment and transmission of data regarding user behaviour when viewing videos on our website

 

Name

vidalytics*

Storage

1 month

Function

Assessment and transmission of data regarding user behaviour when viewing videos on our website

 

Transfer

Vidalytics may combine your personal data with other data and may associate this data with other data such as search history, personal accounts, usage data from other devices, and any other data that Vidalytics has about you. This data could be made available to third parties. According to the legal framework of the European Union, an adequate level of data protection cannot be guaranteed, as access by US authorities, in particular US intelligence services, cannot be ruled out.

Here you can access the data processor’s privacy policy.

 

Miscellaneous

Name

Klaro

(Consent-Manager)

Storage

365 days

Function

We use Klaro to manage user consent to accept cookies. The user’s decisions are saved in a cookie. This purpose emerges from Article 6(1) Letter (a) and Article 7 of the GDPR.

 

Name

NID

Storage

6 months

Funktion

For unlocking of Google Maps content

 

Name

lang

Storage

Session

Function

To automatically select the language when navigating through the web pages.

 

Transfer

These data are not shared with third parties.

 

6. Your rights regarding personal data

You enjoy the following rights regarding your personal data:

  • You have the right to know why your personal data is needed, what happens to it and how long it is stored;
  • Right of access: You have the right to view your personal data known to us;
  • Right to rectification: You have the right to add to your personal data, to rectify it, or to have it erased or blocked whenever you wish;
  • If you have given us your consent to processing of your data, you have the right to revoke this consent and have your personal data erased;
  • Right to data portability: You have the right to request that all your personal data be transferred in its entirety from a certain controller to another controller;
  • Right to object: You can object to processing of your personal data. We comply with this unless there exist legitimate reasons for its processing.

Please contact us whenever you want to exercise these rights. Please use the contact details at the end of this cookie policy statement. If you have a complaint about how we are processing your data, we would like to know about it, but you also have the right to address it to the supervisory authority (data protection authority).

 

7. Deactivating cookies in your browser

It is also possible to delete cookies automatically or manually in the Internet browser. You can also specify that certain cookies may not be accepted. Another possibility is to change the settings of your internet browser so that you receive a message each time a cookie is placed. Please refer to the instructions in the Help section of your browser for more information about these options.

Please note that our website may not function properly if all cookies are deactivated. If you delete the cookies in your browser, they will be placed again when you visit our website next time.

You can find out how to block cookies in the browser by using these links:

Apple Safari:
http://www.apple.com/legal/privacy/de-ww/cookies/

Mozilla Firefox:
https://support.mozilla.org/de/kb/Cookies-blockieren

Google Chrome:
https://support.google.com/chrome/answer/95647?hl=de

Microsoft Edge:
http://windows.microsoft.com/de-de/windows-10/edge-privacy-faq

 

8. Contact details

For questions and/or comments about our cookie policy and this statement, please do not hesitate to contact us using the following contact details:

XPLM Solution GmbH
Walter-Oehmichen-Str. 20
68519 Viernheim, Germany

E-Mail: marketing@xplm.com
Phone: +49 6204 98092-0