Privacy Policy

This privacy policy will describe the type, scope and purpose of processing of personal data (hereinafter referred to as “data”) that takes place in connection with our online offer and the corresponding websites, functions and content as well as external online presences such as our social media profile (hereinafter referred to as “online offer”). With regards to the terms used such as “processing” or “controller”, we refer to the definitions in Article 4 of the EU General Data Protection Regulation (GDPR).

For informative purposes this privacy policy is also available in Japanese.

Controller

MVTec Software GmbH
Arnulfstr. 205
80634 München
+49 89 457 695 0
info@mvtec.com

Data protection officer

c/o activeMind AG
Potsdamer Str. 3
80802 Munich
+49 89 919294-900
datenschutzbeauftragter@mvtec.com

Terms used

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie), or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data. The term is broad and encompasses practically every use of data.

"Pseudonymization" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

"Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data

"Processor" means a natural or legal person, public authority, agency or other body who processes personal data on behalf of the controller.

Rights of the data subjects

You have the right to obtain confirmation as to whether personal data concerning you is being processed and information about this data as well as further information and copies of the data in accordance with Article 15 of the GDPR.

In accordance with Article 16 of the GDPR, you have the right to the completion of your personal data or the rectification of inaccurate personal data concerning you.

In accordance with Article 17 of the GDPR, you have the right to request that we delete the personal data concerning you immediately or, alternatively, in accordance with Article 18 of the GDPR, to obtain the restriction of the processing of your personal data.

You have the right to the release of the personal data provided by you and to transmit that data to another controller in accordance with Article 20 of the GDPR.

You have the right to withdraw your consent with effect for the future in accordance with Article 7(3) of the GDPR.

You have the right to object to the future processing of your personal data at any time in accordance with Article 21 of the GDPR. The objection can be made against processing for the purposes of direct marketing in particular.

You can exercise your data protection rights by contacting our data protection officer at datenschutzbeauftragter@mvtec.com.

Further, in accordance with Article 77 of the GDPR, you have the right to lodge a complaint with the responsible supervisory authorities. You can find a list and respective addresses of supervisory authorities under https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Access data and log files

We collect data on all accesses to the server on which the service is located (“server log files”). The access data includes the name of the website and/or file(s) accessed, the date and time it was accessed, the volume of data transferred, messages on the successful access, the browser type and version, the user’s operating system, the referrer URL (the previously visited website), IP address and the requesting provider.

When checking for software updates upon launch or when accessing the RSS newsfeed on our website, the following additional data is transferred by our software: a caller id (i.e., the software’s name), the user’s system architecture and operating system and the version and operating language of our software. When using the HALCON Variable Inspect extension for Visual Studio, the following additional data is submitted: the Visual Studio version you are using and the programming language.

Access data is processed for the purposes of ensuring an unproblematic website connection, ensuring seamless use of our website, analysis of system security and stability as well as for additional administrative purposes.

The anonymized server logs are analyzed by us in order to get a better understanding of how our software is used and to then incorporate these findings into future product development.

Our legitimate interest pursuant to Art. 6 para. 1 f) GDPR in operating our company pages on LinkedIn and XING is to conduct effective marketing via frequently used platforms.

We use technical service providers for the operation and maintenance of our website, who are commissioned as our processors.

Log file data is saved for a maximum of up to 7 days for security reasons (e.g., to clarify any improper or fraudulent use) and then is deleted or anonymized. Data that must be stored beyond that time limit for the purpose of providing proof are exempt from this time limit until the case in question has been definitively decided.

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address and cookie ID, the service and functionality of our website are not guaranteed. Further, individual services may be unavailable or limited.

Contacting us

When a user contacts us (e.g., via the contact form, e-mail, or phone), the user’s data is processed for the purpose of processing and handling the contact request in accordance with Article 6(1)(f) of the GDPR. If you contact us to request an offer, the data entered in the contact form will be processed for the purpose of implementing precontractual measures (Art. 6(1)(b) GDPR). The information you provide will be stored for the purpose of processing your inquiry and for possible follow-up questions.

Our website is maintained by a service provider, who acts as our processor. If you send us an inquiry, service providers used by us may receive data for these purposes if they require the data to perform their respective services (e.g., IT services). All service providers are contractually obliged to treat your data confidentially.

We will delete inquiries that are no longer required. We will evaluate the necessity of storing inquires every two years; further, relevant legal archiving obligations apply.

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your contact information and the reason for the inquiry.

FEEDBACK FORM

Through our feedback forms, you have the opportunity to provide us with anonymous or personalized feedback about our products. We use your feedback as well as your information to further develop our products and to better tailor them to your needs. If you do not provide any personal data such as your e-mail address, we cannot draw any conclusions about your person, so that the feedback can also be provided anonymously. If you have a question, please provide us with your e-mail address so that we can contact you. Your e-mail address will only be used by us to contact you and will not be linked to any other of your personal data.

If a user provides us with feedback via the forms provided, the user's data will be processed for the purpose of handling and processing the feedback in accordance with Article 6(1)(f) of the GDPR. If you make a request within the feedback form to receive a (further) offer, form will be processed for the purpose of implementing precontractual measures (Art. 6(1)(b) GDPR). The information you provide will be stored for the purpose of processing your inquiry as well as your feedback and for any follow-up questions.

Our website is maintained by a service provider, who acts as our processor. If you send us an inquiry, service providers used by us may receive data for these purposes if they require the data to perform their respective services (e.g., IT services). All service providers are contractually obliged to treat your data confidentially.

In addition, it is possible that you will not be contacted by us, but by one of our sales partners, when you make an inquiry via the feedback form. We have concluded corresponding contracts with our sales partners. You can find an overview of our sales partners here.

Feedbacks as well as inquiries within the feedback forms that are no longer needed will be deleted. We will evaluate the necessity of storing feedbacks every two years; further, relevant legal archiving obligations apply.

The provision of your personal data is voluntary. However, if you wish to send us a request within the feedback forms, we can only process it if you provide us with your mail address and the reason for the inquiry.

Job application

We will process the data provided by you for the purpose of evaluating professional suitability and for contacting you.

The processing occurs in order to establish an employment relationship within the scope of implementing the precontractual measures, which are carried out upon request, Art. 6 (1)(b) GDPR.

Within the company, access to your data is granted to those departments that require it to fulfil contractual, legal and regulatory obligations and to protect legitimate interests.

For our application process, we use personnel management software to help us manage this process and the job postings. For this, we have a commissioned-processing contract with the service provider.

Should your application be rejected, deletion thereof will occur six months after notification of the decision. If your application is successful, the application documents will be saved at least for the duration of your employment at MVTec Software GmbH.

The provision of your personal data is neither legally nor contractually required. However, processing the application is not possible without this provision.

Newsletter, white papers & advertising

We send newsletters, e-mails, and other electronic messages with marketing information about us and our services (hereinafter referred to as the “newsletter”). Delivery of the newsletter and the corresponding performance measurements are carried out on the basis of the recipient’s consent in accordance with Article 6(1)(a) GDPR. If we advertise via telephone or postal mail, the processing occurs on our legitimate interest on direct marketing in accordance with Art. 6 (1)(f) GDPR.

Insofar as you have requested a white paper, we will send you an e-mail with a link to download the white paper. If you have not downloaded the white paper within 3-5 days, we will send you a follow-up e-mail to remind you of the white paper. If you have consented to being contacted by us or one of our sales partners when registering to download the white paper, your personal data will be processed by us to contact you individually and may be passed on to one of our sales partners. The download of the white paper as well as contacting you is based on your consent according to Art. 6 (1) (a) GDPR. You can revoke your consent at any time.

Double opt-in and logging: Users who subscribe to our newsletter must go through a double opt-in process. This means that after they subscribe, they receive an e-mail asking them to confirm their subscription. This e-mail confirmation ensures that no one can sign up for our newsletter with an e-mail address they do not own. Newsletter subscriptions are logged so that we can demonstrate proof of the subscription process in accordance with the statutory requirements. Data will only be processed in this context as long as the corresponding consent has been given. Afterwards they will be deleted.

We use a service provider, who acts as our data processor, for the mailing and any evaluations.

Cancellation/revocation – You may cancel your subscription to our newsletter at any time. This effectively means that you revoke your consent with effect for the future. There is a link to cancel your subscription to our newsletter at the bottom of every newsletter. We have the right to save the e-mail address that you provided for up to three years before deleting it on the basis of our legitimate interests in order to prove that you did in fact consent to receive the newsletter at one point. The processing of this data will be limited to the purpose of defense against possible claims. User’s may individually request that their data be deleted at any time as long as they confirm that they previously provided their consent to receive the newsletter.

The provision of your personal data is voluntary. However, without the provision of your data, we cannot send you a newsletter or provide you with the download of our white paper.

Registration and customer login

To access our software product downloads, interface downloads and our free application evaluation service, you must register for a customer account. This customer account is also necessary if you want to use our MVTec Software Manager to download our software products.

For this purpose, we process your data in accordance with Art. 6 (1) (b) GDPR.

In addition, we also use your contact information to inform you about similar services and products for which you have registered. Your data may be forwarded to our sales partners so that they can advise and inform you about our products. The data provided during registration for the customer login will be processed according to our legitimate interest in direct marketing purposes (Art. 6 (1)(f) GDPR).

We use technical service providers for the operation and maintenance of our website and services, who are commissioned as our processors.

The personal data you share with us may be transferred into a third country, the United States of America.

Your personal data will be stored for a maximum of five years until the last activity in the customer account.

The provision of your personal data is neither legally nor contractually required. However, we cannot create a customer account for you without this provision. Please note that such an account is required to download our software products and use our services.

LinkedIn and XING

We maintain profiles on the social media platforms of LinkedIn, a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, and XING, a service provided by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany, to share information about our products, stories about exciting applications, events and tradeshows hosted by us and to communicate with our customers. On XING we also share vacancies.

The privacy policies of LinkedIn and Xing and New Work SE apply:

• https://www.linkedin.com/legal/privacy-policy
• https://privacy.xing.com/en/privacy-policy
• https://www.new-work.se/de/datenschutz

Our legitimate interest pursuant to Art. 6 para. 1 f) GDPR in operating our company pages on LinkedIn and XING is to conduct effective marketing via frequently used platforms.

LinkedIn's services require data to flow from the European Union (EU), the European Economic Area (EEA), and Switzerland to the United States (U.S.) and back. For more details, see the privacy policy of LinkedIn.

The services provided by XING also require data transfers outside the Europea Union (EU) and the European Area (EEA). For more details, see the privacy policy of XING.

LinkedIn retains your personal data as long as you keep your account open or as needed to provide you services. This includes data you or others provided to LinkedIn and data generated or inferred from your use of LinkedIn’s services. Even if you only use LinkedIn’s services when looking for a new job every few years, LinkedIn will retain your information and keep your profile open, unless you close your account. In some cases, LinkedIn chooses to retain certain information (e.g., insights about services use) in a depersonalized or aggregated form.

XING retains your personal data until you close your account. XING may also save certain information (e.g., employer reviews) in an anonymous form beyond this point.

The provision of your personal data is neither legally nor contractually required. However, you cannot interact with us or our content on LinkedIn or XING without this provision.

Adobe Fonts

To display fonts on our website, we use Adobe fonts. Adobe Fonts is a service that provides access to a font library and is provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe). When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. According to Adobe Font Service, no cookies are placed or used to provide the fonts. To provide the Adobe Font Service, Adobe may collect information about the font used to identify the website itself and the associated Adobe Account. This establishes a connection to an Adobe server in the United States.

You can set your browser to not load the fonts from Adobe servers (for example, by installing add-ons such as NoScript or Ghostery). If your browser does not support Adobe fonts or you disable access to Adobe servers, the text is displayed in the system default font.

Cancellation/revocation:

No option for a simple opt-out or blocking of data transmission is currently offered by the provider. If you wish to prevent tracking of your activities on our website, please revoke your consent for the corresponding cookie category (external content). In this case, however, you may not be able to use our website at all or only to a limited extent.

For more information, see the Adobe Fonts privacy information page and the Adobe Privacy Policy.

YouTube

We maintain a profile on the platform YouTube, a service provided by YouTube, LLC (hereinafter referred to as ‘YouTube’), a subsidiary of Google, LLC (hereinafter referred to as ‘Google’), mainly to share tutorials videos on how to best use our products. We also share videos informing about product updates, as well video recordings from, e.g., conference presentations. Personal data will be processed by the use of the comment function.

The privacy policy of Google applies:

• https://policies.google.com/privacy?hl=en#intro

Our legitimate interest pursuant to Art. 6 para. 1 f) GDPR in operating our company pages on LinkedIn and XING is to conduct effective marketing via frequently used platforms.

YouTube and Google may process your data in the United States of America.

Google may retain your data for longer periods of time. Some data can be deleted by you or will be deleted automatically. For more details, see the privacy policy of Google.

The provision of your personal data is neither legally nor contractually required. However, we cannot communicate with you without this provision.

Cookies

"Cookies" are small files that are stored on the user’s computer. A variety of information can be saved in a cookie. The primary purpose of a cookie is to save information about a user (or the device on which the cookie is saved) during their visit to a website or after they visit a website. Temporary cookies (also known as session cookies or transient cookies) are cookies that are deleted after a user leaves a website and closes their browser. This type of cookie may save the contents of a shopping cart in a web shop or a login status. Permanent or persistent cookies are cookies that remain on the user’s device after they close their browser. For example, these cookies allow a website to save a user’s login status if the user visits the website again after a few days. This type of cookie may also save information on the user’s interest that could be used for web analytics or marketing purposes. Third-party cookies are cookies that belong to providers other than the controller responsible for the online offer (if the cookies only belong to the controller responsible for the online offer, these are known as “first-party cookies”). We may use temporary and permanent cookies on our website.

If users do not want cookies to be saved on their computer, we ask that they deactivate the appropriate option in the system settings of their browsers. Saved cookies can be deleted in your browser’s system settings. If you do not allow cookies to be saved on your browser, this could limit the functions of our website that you can use.

You can find out more about generally opting out of the use of cookies that are saved for the purposes of online marketing for a number of services, and for tracking in particular, on the American website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. Furthermore, you can prevent cookies from being stored on your computer by switching off that option in your browser’s settings. Please note that, if you choose to do this, you may not be able to use all of the functions of this online offer.

Use of technically required cookies

We use cookies to make our website more user-friendly. Some elements of our website require that the respective browser be identified, even after a page change.

Our legitimate interest pursuant to Art. 6 para. 1 f) GDPR in operating our company pages on LinkedIn and XING is to conduct effective marketing via frequently used platforms.

For the details on the cookies we use and their retention period see our list of cookies below.

Recipients of the data may be technical service providers, who work on the operation and maintenance of our website as the processor. For this, we have the corresponding data processing agreement with the service providers.

The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data the service and functionality of our website are not guaranteed. Further, individual services may be unavailable or limited.

Use of cookies that are not technically required

Parts of our websites use “cookies”. These are small text files, hidden behind this standard technology, which are stored on the device you are using and–among other things–make visiting a website more comfortable or more secure. Cookies can also be used to better tailor the offering on a website to the interests of the visitors or generally to improve the offer on the basis of statistical evaluations.

We use the web-analysis technologies of the following providers:

• Google AdWords
• Google DoubleClick
• Matomo
• YouTube

The respective legal basis for this processing is your consent (Art. 6 (1)(a) GDPR).

For the details on the cookies we use and their retention period see our list of cookies below.

Recipients of the data may be technical service providers, who work on the operation and maintenance of our website as the processor. For this, we have the corresponding data processing agreement with the service providers.

The provision of the aforementioned personal data is neither legally nor contractually required. Of course, you can view our website without cookies. Internet browser are regularly configured to accept cookies. In general, you can disable the use of cookies via your browser settings at any time (see “Withdrawal of consent”). However, without this data individual services of our website may not work or be unavailable or limited.

In the remaining Privacy Policy you will find additional information regarding the recipients of the above mentioned services, details of the technical functionality of the tools as well as how the data transfer (tracking) can be prevented.

Google AdWords

We use Google AdWords to position advertisements on the Google advertising network (e.g., in search results, in videos, on websites, etc.) so that these advertisements are shown to users who may be interested in seeing them. This allows us to use advertisements for and within our online offer in a more targeted manner in order to present users with advertisements that could potentially interest them. For these purposes, when a user access our website and other websites on which the Google advertising network is active, Google immediately creates a code and what are known as “(re)marketing tags” (invisible images or code, also known as “web beacons”) are integrated into the website. These allow the website to save an individual cookie, i.e. a small file, on the user’s end device (comparable technology may be used instead of cookies). This file contains information on which websites the user has visited, which content they expressed interest in and which offers they clicked on, as well as technical information on the user’s browser and operating system, referring websites, the time they spend on the website and other information on how the user uses the online offer.

Further, we receive an individual "conversion cookie". The information collected with the help of the cookie allows Google to compile conversion statistics for us. However, we only receive an anonymous total number of users who have clicked on our ad and were sent to pages that contain a conversion tracking tag. We do not receive any information that would allow us to personally identify any users.

The users’ data is processed pseudonymously on the Google advertising network. This means Google does not save or process users’ names or e-mail addresses, but rather processes the relevant cookie-related data within the pseudonymous user profile. This means, from Google’s perspective, the ads are not managed for and shown to a concretely identified person, but rather for the cookie owner, regardless of who the cookie owner is. This does not apply if a user has expressly allowed Google to use their data without pseudonymization. The information collection about the user will be transmitted to Google and stored on Google’s servers in the US.

Google may process your data in the United States of America.

You can find more information on how Google uses data as well as how you can change your settings or withdraw your consent in Google’s privacy policy (https://policies.google.com/technologies/ads) and in Google’s ad settings (https://adssettings.google.com/authenticated).

Google DoubleClick

This website uses the remarketing function “DoubleClick” by Google. This makes it possible to present interest-based advertising to the website visitor within the Google advertising network. The cookie is used to recognize a visitor when they visit websites that are part of the Google advertising network. There, the visitor may be shown advertising that relates to content that was previously accessed on websites that use the same remarketing tools.

Google may process your data in the United States of America.

Matomo

This website uses Matomo, an open source software for the statistical analysis of visitor access. The provider of the Matomo software is InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Matomo uses cookies that enable your use of the website to be analysed. The information generated by the cookie about your use of the website is stored on a server in Germany. We have confidentially configured Matomo so that no profiling takes place. The IP address is anonymised immediately after processing and before it is stored by truncating the last 2 bytes. You have the option of preventing the installation of cookies by changing the settings of your browser software. We would like to point out that if you do so, you may no longer be able to use all the functions of this website. You can find more information on the privacy settings of the Matomo software at the following link: https://matomo.org/docs/privacy/.

The processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You give your consent to web analysis by Matomo by clicking on the corresponding option in our cookie banner on our website. Without this consent, no web analysis cookies will be set by Matomo.

Matomo uses cookies that are saved on the user’s computer and that allow them to analyze how the user uses our online offer. Pseudonymous use profiles on the users may be created using the processed data. The cookies are saved for one week. The information generated by the cookie regarding your use of this website is only stored on our server and will not be given to third parties.

Users may withdraw their consent to anonymous data collection by Matomo with effect for the future at any time by unticking the checkbox below. In this case, an “opt-out cookie” will be stored in your browser which will prevent Matomo from collecting session data. When a user deletes their cookies, however, the opt-out cookie will also be deleted and must be reactivated by the user.

You are neither legally nor contractually obliged to allow us to use your already anonymised data for web analysis. However, we cannot further optimise and improve our services without the provision of your data.

YouTube

We embed YouTube videos on our website. The operator of the respective plugins is YouTube, LLC (hereinafter ‘YouTube’). YouTube, LLC is a subsidiary of Google LLC, (hereinafter ‘Google’). When you visit a page with the YouTube plug-in, a connection to YouTube’s servers will be created, which tells YouTube which pages you visit. When you are logged into your YouTube account, YouTube can associate your browsing behaviour with you personally. You can prevent this by logging out of your YouTube account beforehand. If a YouTube video is started, the provider uses cookies that collect information about user behaviour. Visiting YouTube automatically triggers a connection to Google.

By providing videos on the YouTube video platform, our servers are relieved and we can use the saved computing power elsewhere. This in turn contributes to our system stability and allows us to offer a wider range of services.

Everyone who has disabled the storage of cookies for the Google ad program will not have to expect any cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you would like to prevent this, you must block the storage of cookies in the browser.

Youtube and Google may process your data in the United States of America.

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional limitations on the website.

You will find additional information on the purpose and scope of the data collection and its processing by YouTube in the provider’s privacy policy, as well as additional information on your rights and setting options for protecting your privacy (https://policies.google.com/privacy).

Privacy policy for further purposes unrelated to the Website

Processing of your data in the context of free and paid events

Registration, organization, and direct marketing

The data you enter will be processed for the following purposes:

• For individual communication with you
• Organization and implementation of the event
• Processing any follow-up questions about the event
• Forwarding your contact details to our sales partners so that they can advise you and inform you about our products.
• Sending you further information about similar events and products

This enables us to hold and organize the events, to optimize and adapt the events to your needs and to contact our sales partners and ourselves with further information.

For free events, the legal basis for this is Art. 6 (1) (f) GDPR, the practicable and user-friendly organization of the events, including a good visitor experience for the purpose of external presentation of the company and our legitimate interest in promoting our sales.

For chargeable events, the legal bases are Art. 6 (1) (b) GDPR, the establishment, execution and fulfilment of the contract with you, and Art. 6 (1) (f) GDPR, the practicable and user-friendly execution of the events, including a good visitor experience for the purpose of external presentation of the company and our legitimate interest in promoting our sales.

With regard to the transfer of data to recipients outside our company, it should first be noted that we only pass on necessary personal data in compliance with the applicable data protection regulations. Under these conditions, recipients of personal data may be, for example

• Public bodies and institutions (e.g., tax authorities, law enforcement authorities) in the event of a legal or official commitment,
• Credit and financial services institutions (processing of payment transactions)
• Tax consultants, auditors and payroll tax auditors (statutory audit mandate)
• Sales partners

Furthermore, technical service providers for registration management as part of a data processor or, if applicable, the dispatch of tickets, invitations and/or communications.

All service providers are contractually committed to treating your data confidentially.

For free events, your data will be collected by us as part of the respective registration for the event. Registration data will be deleted once the above-mentioned purposes no longer apply. The deletion usually takes place after a maximum storage period of three years in our system unless you have objected.

In the case of chargeable events, we process and store your personal data as long as this is necessary for the fulfilment of our contractual and legal obligations. If the data is no longer required for the fulfilment of contractual or legal obligations, it is regularly deleted.

There are exceptions to the above deletion criteria for data,

• which are required for the fulfilment of statutory retention obligations, e.g., German Commercial Code (HGB) and German Fiscal Code (AO). The retention and documentation periods specified there are generally six to ten years,
• which are required for the preservation of evidence within the framework of the statutory limitation periods. According to Sections 195 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is three years.
• which we use for direct marketing purposes, insofar as you have not objected. Deletion generally takes place after a maximum storage period of 3 years in our system.

The provision of your personal data is voluntary. We can only offer events if we are able to carry out the associated processing activities.

Please read the information on your right to object in accordance with Art. 21 GDPR above.

Registration, organization, and direct marketing

At some events, photos and video recordings are made of the participants. By registering for the event, you give your consent (Art. 6 (1) (a) GDPR). The data will only be stored for as long as the intended purpose and your consent are given. Your consent can be revoked at any time in the future.

The recordings are used for the external presentation of the company. No further use of the recordings is intended. Publication takes place both on the company's own website and on the social media channels of MVTec Software GmbH and, if applicable, in print media.

This consent is voluntary. If it is not given, there will be no disadvantages, in particular you can continue to participate in the event. This consent can be revoked at any time with effect for the future.

If you do not give your consent, you will be instructed accordingly at the reception of events as to how recordings of you can be prevented.

Processing your data in the context of the digital events

The data entered by you will be collected and stored for the purpose of individual communication with you and for the execution of the event. Processing is carried out for the purpose of implementing pre-contractual and contractual measures (Art 6 (1)(b) GDPR).

A digital business card is created from the data you enter. This business card will be made available to the other participants. At the same time, you have the opportunity to learn more about the other participants. This allows the participants to get to know each other and enables a better exchange of opinions. Depending on the platform, participants can communicate via text or video/voice chats. Participants can always choose to allow or deny access to their microphone and camera as well as which hardware the platform accesses. Processing is carried out on the basis of a legitimate interest on the provision of an uncomplicated contact (Art 6 (1)(f) GDPR).

To be able to improve our events in the future and to increase their attractiveness, we record your activities on the platform. This includes, for example, staying in various rooms, watching lectures or downloading materials. Points can also be earned through these activities.

In some cases, we are also offering a competition. The competition can be based on, for example, points that are earned through activities on the platform or hidden clues forming a specific phrase or password. Up to three participants will receive a prize. Depending on the competition mode, winners are, for example, based on their high score or selected via a lucky draw. For further information on the competition, please refer to the conditions of participation. Processing is carried out on the basis of a legitimate interest (Art 6 (1)(f) GDPR).

We will process your data provided for the purpose of contacting you for further events. For this purpose, you will receive an E-Mail asking if you prefer not to be contacted for further events.

If necessary, service providers employed by us may receive data for these purposes, insofar as they require the data to fulfil their respective service. All service providers are contractually obliged to treat your data confidentially.

Data will no longer be processed if you object to this processing. In addition, we are subject to the legal retention periods.

The provision of your personal data is voluntary or necessary for the fulfillment of the contract. We can only process the participation in the event or contact you if you provide us with your name and e-mail address.

Webinars

When registering for our free webinars, your data will be collected and stored for the purpose of conducting the webinar and communicating with you during the webinar. Processing is carried out for the purpose of implementing pre-contractual and contractual measures (Art 6 (1)(b) GDPR).

In return for your free participation, we may contact you regarding the webinar content or forward your registration information to the appropriate sales partner in your country for contact.

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of the webinar. For this purpose, we have concluded the corresponding data protection contract with the providers.

For the execution of our webinars we use the tool “GoToWebinar” by the provider GoTo, Inc. Processing takes place in the United States of America. An adequate level of data protection is ensured via Standard Contractual Clauses.

We will delete your data if they are no longer required or if you have objected to their processing, as far as there are no legal retention regulations to the contrary.

The provision of personal data is not required by law or contract. However, it is not possible to participate in the webinar without providing this information.

Training courses

When you register for paid training courses, we collect your name, email address and credit card information. We need your e-mail address and your name to identify you and to send you the access data for our training courses. The credit card information is used for payment transactions.
We collect your personal data to process the contract in accordance with Art. 6 (1) (b) GDPR.
We store your data until the purpose has been achieved. We usually delete your credit card information after payment has been processed, and your other personal data after completion of the respective training.
The provision of your personal data is neither legally nor contractually required. However, you cannot participate in our trainings without providing your data.
For the execution of our trainings, we use the tool “Microsoft® Teams” by the provider Microsoft Corporation. Processing takes place in the United States of America. An adequate level of data protection is ensured via Standard Contractual Clauses.

Contractual services

We process data concerning our contractual partners and interested parties as well as other clients, customers, contractors, or business partners (collectively referred to as “business partners”) in accordance with Article 6(1)(b) GDPR in order to provide them with our contractually agreed upon services or to perform the necessary steps prior to entering into a contract. We also process the data to fulfil legal obligations in accordance with Article 6(1)(c) GDPR.

We only provide this data to external persons or companies if required within the provisions of a contract.

The data will be deleted if it is no longer required for the performance of contractual or legal obligations or for the performance of warranty obligations or comparable obligations, whereby the necessity of the storage of data will be reviewed every three years; otherwise statutory retention obligations apply.

The provision of the data is required by law and/or contract. Without the provision of the necessary data, we cannot provide our services.

Processing of your data in the context of credit assessment

We transmit personal data collected in the context of this contractual relationship for the purpose of applying for, carrying out and terminating this business relationship as well as data on non-contractual or fraudulent behavior to CRIF GmbH, Leopoldstrasse 244, 80807 Munich, Germany. The legal basis for this transfer is Article 6 (1) Sentence 1 Letters b and f of the General Data Protection Regulation (GDPR). The exchange of data with CRIF GmbH also serves the purpose of fulfilling legal obligations for the performance of creditworthiness (§§ 505a and 506 BGB). CRIF GmbH processes the data received and also uses it for the purpose of profiling (scoring) in order to provide its partners in the European Economic Area and in Switzerland and, if applicable, in other third countries (provided that there is an adequacy decision by the European Commission), inter alia, to assess the creditworthiness of natural persons. Further information on the activities of CRIF GmbH can be viewed online at www.crif.de/datenschutz.

Processing of your data in the context of the use of HDevelop

Purpose of processing and legal basis

The purpose of the data processing is to improve our software by evaluating telemetry data. By analyzing your usage, we can tailor the software better to our users’ needs, for example, by identifying missing and unused features. Furthermore, we want to improve the general user-friendliness by doing so.

For this purpose, we collect data of the following categories:

• System information:
  E.g., operating system, locale, region (via truncated IP address, hardware and architecture (like screen resolution or graphic card models) 
• Usage statistics of HDevelop:
  E.g., system information (like HALCON version and language), user flow inside HDevelop (like 'which tools are used' or 'how the export is used')
• Usage statistics of the HDevelop help:
  E.g., the used search terms, the viewed chapters and pages
• Usage statistics of the HALCON library:
  E.g., lists of the used HALCON modules (like “Foundation" or "BarCode"), operator classes, operator statistics. We do not track program flows.

The collection of telemetry data is restricted to the development environment:

• The collection of usage data is restricted to HALCON's development environment, i.e., HDevelop.
• No data will be collected from users' HALCON runtime environment, i.e., applications.

Generally, the personal reference of the data is not relevant for us. However, it cannot be ruled out that the processing may also contain personal data (e.g., your IP address).

As a legal basis for the processing, we rely on your consent pursuant to Art. 6 (1)(a) GDPR.

Recipients of the data

We, MVTec Software GmbH, process your data exclusively within the company. A service provider is used as processor for the collection of telemetry data. Data is not passed on to third parties.

Third country transfer

A third country transfer is not intended.

Retention period

The data specified above will be stored until the purpose ceases to apply or consent is revoked, but for no longer than two years.

Mandatory or required provision

Providing your data is voluntary. However, if you choose to share usage data with us, you are making a significant contribution to our ability to tailor our software to your needs and provide you with the best possible product.

Automated decision-making, including profiling

Automated decision-making including profiling is not conducted.

Withdrawal of consent

You can withdraw your consent to the storage of your personal data and its use at any time. This effectively means that you revoke your consent with effect for the future. In the software, you will find the option to do so under Preferences -> Telemetry by deselecting the corresponding checkboxes. If you need help with this, you can also contact us using the contact options above.

MVTec Christmas Campaign Competition 2024 – Conditions of participation

1. Organizer

MVTec Software GmbH (hereinafter: MVTec) is the sole organizer of this competition and is responsible for its implementation, organization and handling. In this respect, the social media platform LinkedIn Inc. only serves as a communication platform used by MVTec Software GmbH to communicate the competition. Questions of any kind should therefore be addressed directly to MVTec Software GmbH (online@mvtec.com) and not to social media platforms or other third parties associated with the operation of the website.

2. Participation

(1) Anyone aged 18 or over is eligible to participate. Employees of MVTec Software GmbH and its group companies, as well as other persons involved in the conception and implementation of the competition, are not eligible to participate.

(2) The participant in the competition is the person who owns the profile/account under whose identity the participation takes place.

(3) Participation takes place by registering and answering the riddle on the MVTec Software GmbH company page/on the LinkedIn platform. Participation is only possible once per person/profile/account.

(4) Anyone who has a social media account and takes part in the puzzle can take part.

(5) Participation is free of charge and independent of the purchase of goods or services. By participating in the competition, the user accepts these conditions of participation.

3. Exclusion from the competition

(1) MVTec Software GmbH reserves the right to exclude persons from the prize draw in the event of a breach of these conditions of participation.

(2) Anyone who provides false personal details may be excluded from the competition.

(3) Persons who make use of unauthorized aids or otherwise gain advantages through manipulation will also be excluded. In this case, prizes may also be subsequently withdrawn and reclaimed and the persons may be obliged to pay compensation on the basis of the statutory provisions.

(4) MVTec Software GmbH reserves the right to check during the course of the competition, before announcing the winner or before handing over the prize, whether these conditions have been complied with and, if necessary, is entitled to exclude individual persons up to the time of handing over the prize. The right to reclaim winnings in accordance with paragraph 3 remains unaffected by this and can still be exercised even if the person has not been excluded.

4. Implementation and processing

(1) The competition begins with the posting of a corresponding puzzle entry by MVTec Software GmbH on its social media profile/website, in which users are informed about the competition, the specific closing date for entries and the advertised prizes (competition posting by MVTec). If a date without a specific time is specified for the end of the competition, the competition shall end at midnight on the day specified by the date (duration of the competition). This also applies if the day specified by the date falls on a Sunday or public holiday.

(2) The winner drawn will receive the prize posted on the website/social media profile. The type and number of prizes offered, the exact day and location of the event will be communicated by the MVTec Software GmbH social media team on the respective competition posting on their social media profile or website. The drawn winner is not entitled to a specific prize to be awarded as part of the competition and cannot exercise any right of choice.

(3) Unless otherwise stated, the winner of a prize shall be determined by drawing lots and notified no later than one week after the end of the competition by means of a post on the social media platform/on the MVTec website, by mentioning the winner's name on the MVTec Software GmbH social media page/website. The winner must confirm receipt of the prize notification to MVTec Software GmbH immediately, at the latest three days after notification, and provide their real name and postal address by e-mail to (online@mvtec.com). Otherwise, MVTec Software GmbH shall be entitled to determine a new winner in accordance with the draw.

(4) The winner is the participant who has successfully taken part in the competition in accordance with § 2, i.e. who has answered all puzzle questions correctly and has been determined by the draw.

(5) A cash payment of the winnings or a possible prize replacement is not possible. The prize is not transferable to third parties.

5. Premature termination of the competition

MVTec reserves the right to cancel or terminate the competition at any time without giving reasons, in particular if for technical reasons (e.g. viruses in the computer system, manipulation or errors in the hardware and/or software) or for other reasons the proper execution of the competition can no longer be guaranteed. In this case, the participant may not demand compensation from MVTec or assert any other claims.

6. Liability

(1) MVTec Software GmbH shall be released from all obligations arising from the competition at the latest when the prize is handed over, unless an earlier point in time results from these regulations.

(2) MVTec Software GmbH shall only be liable for material defects and/or defects of title in the prizes in accordance with the provisions set out herein, unless mandatory statutory provisions provide otherwise.

(3) MVTec Software GmbH shall not be liable for the insolvency of a service provider/dealer/manufacturer entrusted with the provision of the prize or for any consequences arising from this for the execution and handling of the competition.

(5) If circumstances within the sphere of the winner and/or caused by his/her culpable actions mean that the prize cannot be used for the intended purpose, MVTec cannot be held liable for this. This shall apply accordingly to the loss of the prize after it has been handed over to the winner.

(6) Jegliche Schadenersatzverpflichtungen von MVTec, einschließlich seiner Mitarbeiter sowie Erfüllungsgehilfen aus oder im Zusammenhang mit dem Gewinnspiel, gleich aus welchem Rechtsgrund, sind auf Fälle von Vorsatz oder grober Fahrlässigkeit, sowie der Höhe nach auf den vertragstypischen und vorhersehbaren Schaden begrenzt. Schäden wegen der Verletzung von Leben, Körper und Gesundheit oder nach dem Produkthaftungsgesetz sind von der Haftungsbegrenzung ausgenommen.

(7) Für die Rechtmäßigkeit von AGB Dritter wie beispielsweise der Herstellern der Preise übernimmt MVTec keine Haftung.

7. data protection

(1) Please read our privacy policy to find out how your data is processed.

8. Miscellaneous

(1) These conditions of participation apply to participation in the respective competition via the MVTec social media page/website. The current conditions of participation and implementation may be changed by MVTec Software GmbH at any time without separate notification.

(2) Legal recourse is excluded.

(3) The law of the Federal Republic of Germany shall apply exclusively.

(4) Should any of these provisions be or become invalid and/or unenforceable, this shall not affect the validity of the remaining provisions. In this case, MVTec and the participant in the competition agree to replace the invalid and/or unenforceable provision with a provision that leads to a regulation that is reasonable for both parties, protects the interests of the parties and comes as close as possible to the purpose of the regulation intended by the parties.

MVTec Christmas Campaign Competition 2024 – Privacy Policy for competitions

Free participation in the competition takes place via LinkedIn and at www.mvtec.com. In this case, the data processing serves exclusively to process the competition. After the draw, an employee will contact the winner to collect data for sending the prize. In addition, the winner's name will be published on our LinkedIn page. By participating in the competition, you agree to this publication.
We therefore process the following data when you take part in the competition:

• Your LinkedIn account name to draw the winner.
• Postal address
• E-mail address

The legal basis for publication is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time for the future.
The legal basis for the processing for participation in the competition is the fulfillment of the contractual relationship existing through participation in the competition (Art. 6 para. 1 sentence 1 lit. b GDPR).

The recipients of the data are the controller, other third parties, e.g. visitors to our LinkedIn profile and, where applicable, processors and competition partners, e.g. to send you the prize. Data processing and data transfer may vary depending on the competition and is therefore specifically described in the respective conditions of participation.
We process and store your personal data as long as this is necessary for the fulfillment of our contractual and legal obligations. If the data is no longer required for the fulfillment of contractual or legal obligations, it will be regularly deleted. The winner's data is subject to statutory retention obligations, e.g. the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods specified there are generally six to ten years. As soon as you revoke your consent for the future, the personal data will be deleted, taking into account any relevant retention obligations.
Participation in the competition and the associated data collection is, of course, voluntary. However, the provision of personal data is necessary for participation in the competition. Without the data, it is not possible to participate and, in the event of a win, to send the prize.

Status November 2024