Privacy policy
This privacy policy provides information about the processing of personal data on the website and in the registered user area of korrekturbeleg.de.
This is a convenience translation. The German version of this privacy policy is legally binding; in the event of any discrepancy, the German text prevails.
1. Controller
The controller within the meaning of the General Data Protection Regulation is:
OREONX Software GmbH
Line-Eid-Straße 6
78467 Konstanz
Germany
Email: info@korrekturbeleg.de
2. General information on data processing
We process personal data exclusively within the framework of the applicable data protection provisions. Personal data is any information relating to an identified or identifiable natural person.
Processing takes place in particular to provide our website, answer enquiries, conclude and perform contracts with business customers and ensure the secure operation of korrekturbeleg.de.
3. Accessing the website and server log files
When you access our website, our system automatically processes technical connection data. This includes in particular:
- IP address
- date and time of access
- page or file accessed
- amount of data transferred
- browser type and version
- operating system
- referrer URL
- information about the success of the access
This processing is necessary to provide the website technically, ensure the stability and security of the system, detect misuse and remedy malfunctions.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and proper operation of our website.
Recipients of this data may be technical and hosting service providers that act as processors on our behalf.
The hosting infrastructure for korrekturbeleg.de is located in Germany, in particular in data centres in Nuremberg and Frankfurt am Main. The data centre infrastructure used is ISO 27001-certified.
Server log data is deleted as soon as it is no longer required for the stated purposes, unless retention obligations or legitimate grounds justify longer storage.
4. Cookies and local storage technologies
We use technically necessary cookies or comparable storage technologies to the extent this is required to provide the website or the protected login area. This may include in particular session information, language settings or security-related functions.
The legal basis for using technically necessary technologies is Sec. 25(2) TDDDG. Where personal data is processed in this context, processing is based on Art. 6(1)(f) GDPR or – where the technology is necessary to carry out pre-contractual measures or to perform a contract – on Art. 6(1)(b) GDPR.
Where cookies or comparable technologies requiring consent are used on individual pages, this is done exclusively on the basis of your consent pursuant to Sec. 25(1) TDDDG and Art. 6(1)(a) GDPR.
5. Contact by email or contact form
If you contact us by email or via a contact form, we process the data you transmit, in particular your name, your contact details, the content of your message and any further information you voluntarily provide.
Processing takes place to handle your request, to communicate with you and, where applicable, to initiate or perform a contract.
The legal basis is Art. 6(1)(b) GDPR where your request is aimed at concluding or performing a contract. In other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in properly handling contact enquiries.
Providing your data is not required by law. However, without the necessary information we may be unable to process your request, or unable to process it fully.
We delete this data once the request has been conclusively handled and no statutory retention obligations, ongoing contractual relationships or legitimate interests prevent deletion.
6. Contract initiation, performance and customer administration
If you use our offer as a business customer or initiate a contractual relationship with us, we process in particular master data, contact data, contract data, communication data and billing data.
Processing takes place to prepare and submit quotes, to conclude and perform contracts, for customer administration, for invoicing, to enforce or defend claims and to fulfil legal obligations.
The legal basis is Art. 6(1)(b) GDPR for contract initiation and performance, Art. 6(1)(c) GDPR for statutory retention and documentation obligations, and Art. 6(1)(f) GDPR for asserting, exercising or defending legal claims and for efficient customer and contract administration.
We store contract and billing data for the duration of the contractual relationship and beyond only for as long as statutory retention obligations or legitimate interests require.
7. Registration, login and use of korrekturbeleg.de
As part of registration and use of the protected area of korrekturbeleg.de, we process in particular registration data, user master data, login and authentication data, usage data, security-related log data and communication data in connection with support or service requests.
Processing takes place to set up and manage user accounts, to provide the contractually owed functions, to ensure system security, for error analysis, to prevent misuse and for the technical administration of the service.
The legal basis is Art. 6(1)(b) GDPR where processing is necessary to use the customer account and to provide our services, and Art. 6(1)(f) GDPR for security, anti-misuse and administration purposes.
Where we process personal data within korrekturbeleg.de exclusively on behalf of our customers, this processing is carried out on the basis of Art. 28 GDPR as processing on behalf of a controller. The respective customer is then the controller for this processing.
After the end of the contract, we generally delete customer-stored data within 30 days, unless statutory obligations, legitimate interests or differing agreements prevent this.
8. Recipients and processors
Within our company, personal data is processed only by those units that need this data to fulfil the respective purposes.
Where necessary, we pass data to external service providers that support us with hosting, technical operation, IT security, support services, communication or commercial processes.
Where these service providers process personal data on our behalf, they are contractually engaged as processors on the basis of Art. 28 GDPR.
9. Storage period
We store personal data only for as long as this is necessary for the respective processing purposes. Afterwards, the data is deleted, unless its further storage is necessary to fulfil statutory retention obligations, to secure evidence, to assert, exercise or defend legal claims, or due to overriding legitimate interests.
10. Your rights
In accordance with the statutory provisions, you have in particular the following rights:
- right of access to the personal data we process about you
- right to rectification of inaccurate data
- right to erasure
- right to restriction of processing
- right to data portability
- right to withdraw consent given, with effect for the future
- right to object to processing based on Art. 6(1)(e) or (f) GDPR
- right to lodge a complaint with a data protection supervisory authority
You can contact us at any time to exercise your rights.
11. Right to object under Art. 21 GDPR
Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.
If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
12. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR.
The supervisory authority responsible for our company is generally:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart
Germany
13. Updates to this privacy policy
We reserve the right to adapt this privacy policy where this becomes necessary due to legal, technical or organisational changes. The version available at the time of your visit applies.