Datenschutzerklärung

Aimsun Privacy Policy

With the following privacy policy, we would like to inform you about how we process your personal data in accordance with the European Data Protection Regulation (GDPR). This privacy policy applies to all processing of personal data carried out by us, both in the context of our contractual relationship and our Aimsun Software.

Controller

Controller in the sense of the GDPR is

Aimsun SLU
Address: Ronda Universitat, 22B, 08007 Barcelona, Spain
E-mail: info@aimsun.com

Data Protection Team

You can reach our data protection team here:

Aimsun Data Protection Team
Address: Ronda Universitat, 22B, 08007 Barcelona, Spain
E-mail: info@aimsun.com

You can contact our data protection team directly at any time with all questions and suggestions regarding data protection and the exercise of your rights.

Definition

This Privacy Policy is based on the terminology of the GDPR. For your convenience, we would like to explain some important terms in this context in more detail:

Personal Data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Data subject is any identified or identifiable natural person whose personal data are processed by the controller.

Processing means any operation or set of operations that is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.

Third Party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

1. Data for the provision of the website/software and the creation of the log files

If you access the software, we collect via server log files technically necessary data that are automatically transmitted to our server, including:

Date and time of access
IP address
Host name of the accessing computer
Websites accessed via the website
Visited page on our website; Amount of data transferred
Information about the browser type and version used
Operating system
Access status (e.g., whether the web page could be accessed without problems or whether you received an error message)
Use of website functions
Entered search terms
Access frequency of the individual web page
Data volume transferred

The temporary storage of data is necessary for the course of a website visit in order to display our website to you. This processing is technically necessary to ensure the functionality of the website and the security of the information technology systems. The legal basis of the processing is thus Art. 6 para. 1 p. 1 lit. f GDPR, in order to guarantee the provision, security and stability of our website.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the provision of the website, this is the case when the respective session has ended. The log files are stored a maximum up to 24 hours directly and exclusively accessible to administrators. After that, they are only indirectly available via the reconstruction of backup tapes and are finally deleted after a maximum four weeks.

For the provision of our online offer, we use storage space, computing capacity and software that we rent or otherwise obtain from the server Amazon Web Services, Inc. (Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109] (web host customer portal) and Dinahosting SL – Rúa das Salvadas, Nr. 41, Bajo – 15705 Santiago de Compostela (A Coruña) (web host for the website). The server location for AWS is based in Frankfurt. However, personal data can be transferred to the US. The European Commission has adopted an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations located in the U.S. that are certified under the EU-U.S. Data Privacy Framework are permitted, accordingly. Amazon Web Services Inc. is certified under the EU-U.S. Data Privacy Framework.

2. Registration, login and user account

To use our software, you need to have an account. The personal data being processed is visible and being manageable depending on your assigned role:

Name
Email Address
Location
Type of Subscription
Billing information

In the context of logins, we also store your IP address along with the access times in order to prove the registration and prevent any misuse of the customer account.

The legal basis is Art. 6(1) s. 1 lit. b GDPR, as the aforementioned processing is necessary to provide you with your customer account, in which you can, for example, also view your order history, reorder items and process your returns. The data processing is limited to such personal data that are necessary to fulfill the scope of services agreed in our General Terms and Conditions – particularly the provision of the customer account.

Your personal data, as listed above, is being pulled out of our CRM Salesforce [415 Mission St FL 3 San Francisco, CA 94105. The European Commission has adopted an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Based on this decision, data transfers to organizations located in the U.S. that are certified under the EU-U.S. Data Privacy Framework are permitted, accordingly. Salesforce is certified under the EU-U.S. Data Privacy Framework.

2.1. Log-In

To access the Software, you must have a registered user account. As part of the registration process and subsequent logins and uses of the user account, the following personal data will be revocably collected and stored from you:

Email address
Password
Your IP address together with the access times, in order to be able to prove the registration and to prevent possible abuse of the user account

The legal basis is Art. 6(1) s. 1 lit. b GDPR, as the aforementioned processing is necessary to provide you with your customer account, in which you can, access the Software. The data processing is limited to such personal data that is necessary to fulfill the scope of services agreed in our General Terms and Conditions – particularly the provision of the user account. The measures to prevent conduct in breach of contract or the law may furthermore be justified on the basis of our legitimate interest pursuant to Art. 6(1) s. lit. f GDPR.

You can delete your personal data, including your user account, at any time. If you have terminated your user account, the data relating to the customer account will be deleted, subject to the order data whose retention is required for legal reasons. If the processed personal data is required for the execution/termination of a contract, early deletion is not possible.

2.2. Help/Customer Support

If you have problems with the setup of your system, you have the possibility to contact the Aimsun Customer Support Team at info@aimsun.com. Below you have the option to call the support team, write an email to the support team or request a callback.

In the context of the support request, the following personal data of you in particular will be processed:

Your email address,
if applicable, your name and
Date and time of the request and
other personal data that you provide to us in the course of contacting us.

The personal data you provide will be processed for the purpose of processing and responding to your contact request in accordance with Art. 6(1) s. 1 lit. b GDPR. If you contact us within the framework of an existing contractual relationship or contact us in advance for information about our range of services or our other services, the personal data you provide will be processed for the purpose of processing and responding to your contact request in accordance with Art. 6(1) s. 1 lit. b GDPR. Otherwise, for the protection of our legitimate interests pursuant to Art. 6(1) s. 1 lit. f GDPR for the appropriate response to customer/contact inquiries.

We delete the personal data accruing in this context, if the request is assigned to a contract, after the time limits for the term of the contract, otherwise after the storage is no longer necessary or restrict the processing if there are legal retention obligations.

3. Transfer of personal data

In the course of our processing of personal data, personal data may be transferred to or disclosed to other recipients. Recipients of this personal data may include, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we comply with the legal requirements and, in particular, conclude appropriate contracts or agreements that serve to protect your personal data with the recipients of your personal data.

4. Data deletion and retention periods

The personal data processed by us will be deleted in accordance with the legal requirements as soon as your consents permitted for processing are revoked or other permissions cease to apply (e.g., if the purpose of processing this data has ceased to apply or it is not required for the purpose). If the personal data are not deleted because they are required for other and legally permissible purposes, their processing will be limited to these purposes. That is, the personal data is blocked and not processed for other purposes. This applies, for example, to personal data that must be retained for reasons of commercial or tax law or whose storage is necessary for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person.

As far as our privacy policy contains further information on the retention and deletion of personal data, these have priority for the respective processing activities.

5. Your rights as a data subject

As a data subject, you are entitled to various rights under the GDPR, which arise in particular from Art. 15 to 21 GDPR. If you wish to exercise any of your rights, please contact us via the contact addresses provided above or our data protection officer.

5.1. Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1) lit. e or lit. f GDPR; this also Applies to profiling based on these provisions. If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also Applies to profiling insofar as it is related to such direct marketing. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

5.2. Right of access to your personal data

You have the right to request confirmation as to whether personal data in question is being processed and to information about this personal data, as well as further information and a copy of the personal data in accordance with the legal requirements.

5.3. Right to rectification

In accordance with the legal requirements, you have the right to request that the personal concerning you be completed or that incorrect personal data concerning you be corrected.

5.4. Right to erasure and restriction of processing

You have the right to demand that personal data concerning you be deleted immediately if one of the reasons provided for by law applies and insofar as the processing or storage is not necessary.

5.5. Restriction of processing

You have the right to demand that we restrict processing if one of the legal requirements is met.

5.6. Right to data portability

You have the right to receive personal data concerning you, which you have provided to us, in a structured, common and machine-readable format in accordance with the legal requirements, or to request that it be transferred to another controller.

5.7. Right of withdrawal for consents

You have the right to revoke any consent you have given at any time.

5.8. Complaint to supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the requirements of the GDPR.

6. Modification and update of the privacy policy

We adapt the privacy policy as soon as the changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g., consent) or other individual notification.

If we continue to develop our website and our offerings or if legal or regulatory requirements change, it may be necessary to amend this privacy policy. You can access the current privacy policy at any time here.

Aimsun Next bekommen

Aimsun Next verwenden

Über Aimsun Next