Privacy Policy

This privacy policy will describe the type, scope and purpose of processing of personal data (hereinafter referred to as “data”) that takes place in connection with our online offer and the corresponding websites, functions and content as well as external online presences such as our social media profile (hereinafter referred to as “online offer”). With regards to the terms used such as “processing” or “controller”, we refer to the definitions in Article 4 of the EU General Data Protection Regulation (GDPR).

Controller

MVTec Software GmbH
Arnulfstr. 205
80634 München
+49 89 457 695 0
info@mvtec.com

Data protection officer

c/o activeMind AG
Potsdamer Str. 3
80802 Munich
+49 89 919294-900
datenschutzbeauftragter@mvtec.com

Terms used

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie), or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data. The term is broad and encompasses practically every use of data.

"Pseudonymization" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

"Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data

"Processor" means a natural or legal person, public authority, agency or other body who processes personal data on behalf of the controller.

Rights of the data subjects

You have the right to obtain confirmation as to whether personal data concerning you is being processed and information about this data as well as further information and copies of the data in accordance with Article 15 of the GDPR.

In accordance with Article 16 of the GDPR, you have the right to the completion of your personal data or the rectification of inaccurate personal data concerning you.

In accordance with Article 17 of the GDPR, you have the right to request that we delete the personal data concerning you immediately or, alternatively, in accordance with Article 18 of the GDPR, to obtain the restriction of the processing of your personal data.

You have the right to the release of the personal data provided by you and to transmit that data to another controller in accordance with Article 20 of the GDPR.

You have the right to withdraw your consent with effect for the future in accordance with Article 7(3) of the GDPR.

You have the right to object to the future processing of your personal data at any time in accordance with Article 21 of the GDPR. The objection can be made against processing for the purposes of direct marketing in particular.

You can exercise your data protection rights by contacting our data protection officer at datenschutzbeauftragter@mvtec.com.

Further, in accordance with Article 77 of the GDPR, you have the right to lodge a complaint with the responsible supervisory authorities. You can find a list and respective addresses of supervisory authorities under https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Access data and log files

We collect data on all accesses to the server on which the service is located (“server log files”). The access data includes the name of the website and/or file(s) accessed, the date and time it was accessed, the volume of data transferred, messages on the successful access, the browser type and version, the user’s operating system, the referrer URL (the previously visited website), IP address and the requesting provider.

When checking for software updates or accessing the RSS newsfeed on our website, the following additional data is transferred by our software: a caller id (i.e., the software’s name), the user’s system architecture and operating system and the version and operating language of our software.

Access data is processed for the purposes of ensuring an unproblematic website connection, ensuring seamless use of our website, analysis of system security and stability as well as for additional administrative purposes.

The anonymized server logs are analyzed by us in order to get a better understanding of how our software is used and to then incorporate these findings into future product development.

The processing occurs according to Art. 6(1)(f) GDPR, based on our legitimate interest in improving the stability and functionality of our website.

We use technical service providers for the operation and maintenance of our website, who are commissioned as our processors.

Log file data is saved for a maximum of up to 7 days for security reasons (e.g., to clarify any improper or fraudulent use) and then is deleted or anonymized. Data that must be stored beyond that time limit for the purpose of providing proof are exempt from this time limit until the case in question has been definitively decided.

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address and cookie ID, the service and functionality of our website are not guaranteed. Further, individual services may be unavailable or limited.

Contacting us

When a user contacts us (e.g., via the contact form, e-mail, or phone), the user’s data is processed for the purpose of processing and handling the contact request in accordance with Article 6(1)(f) of the GDPR. If you contact us to request an offer, the data entered in the contact form will be processed for the purpose of implementing precontractual measures (Art. 6(1)(b) GDPR). The information you provide will be stored for the purpose of processing your inquiry and for possible follow-up questions.

Our website is maintained by a service provider, who acts as our processor. If you send us an inquiry, service providers used by us may receive data for these purposes if they require the data to perform their respective services (e.g., IT services). All service providers are contractually obliged to treat your data confidentially.

We will delete inquiries that are no longer required. We will evaluate the necessity of storing inquires every two years; further, relevant legal archiving obligations apply.

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your contact information and the reason for the inquiry.

Job Application

We will process the data provided by you for the purpose of evaluating professional suitability and for contacting you.

The processing occurs in order to establish an employment relationship within the scope of implementing the precontractual measures, which are carried out upon request, Art. 6 (1)(b) GDPR.

Within the companies relevant for the job applied for these companies will have access to your data.

For our application process, we use personnel management software to help us manage this process and the job postings. For this, we have a commissioned-processing contract with the service provider.

Should your application be rejected, deletion thereof will occur six months after notification of the decision. If your application is successful, the application documents will be saved at least for the duration of your employment at MVTec Software GmbH.

The provision of your personal data is neither legally nor contractually required. However, processing the application is not possible without this provision.

Newsletter and Advertising

We send newsletters, e-mails, and other electronic messages with marketing information about us and our services (hereinafter referred to as the “newsletter”). Delivery of the newsletter and the corresponding performance measurements are carried out on the basis of the recipient’s consent in accordance with Article 6(1)(a) GDPR. If we advertise via telephone or postal mail, the processing occurs on our legitimate interest on direct marketing in accordance with Art. 6 (1)(f) GDPR.

Insofar as you have requested a whitepaper, we will send you an e-mail with a link to download the whitepaper. If you have not downloaded the whitepaper within 3-5 days, we will send you a follow-up e-mail to remind you of the whitepaper.

Double opt-in and logging: Users who subscribe to our newsletter must go through a double opt-in process. This means that after they subscribe, they receive an e-mail asking them to confirm their subscription. This e-mail confirmation ensures that no one can sign up for our newsletter with an e-mail address they do not own. Newsletter subscriptions are logged so that we can demonstrate proof of the subscription process in accordance with the statutory requirements. This includes storage of the time of subscription and confirmation as well as the IP address. Any changes to your personal data stored by the newsletter delivery provider are also logged.

We use a service provider, who acts as our data processor, for the mailing and any evaluations.

Cancellation/revocation – You may cancel your subscription to our newsletter at any time. This effectively means that you revoke your consent with effect for the future. There is a link to cancel your subscription to our newsletter at the bottom of every newsletter. We have the right to save the e-mail address that you provided for up to three years before deleting it on the basis of our legitimate interests in order to prove that you did in fact consent to receive the newsletter at one point. The processing of this data will be limited to the purpose of defense against possible claims. User’s may individually request that their data be deleted at any time as long as they confirm that they previously provided their consent to receive the newsletter.

Customer Login

In order to register as a customer to access our software product downloads, interface downloads and our free application evaluation service in the Customer Area we process your data in accordance with Art. 6(1)(b) GDPR.

We use technical service providers for the operation and maintenance of our website, who are commissioned as our processors.

Your personal data will be stored until a maximum of five years until last activity within the customer login account.

The provision of your personal data is neither legally nor contractually required. However, we cannot create a customer account without this provision. Note that such an account is required to download our software.

LinkedIn and XING

We maintain profiles on the social media platforms of LinkedIn, a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, and XING, a service provided by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany, to share information about our products, stories about exciting applications, events and tradeshows hosted by us and to communicate with our customers. On XING we also share vacancies.

The privacy policies of LinkedIn and Xing apply:

The processing occurs on our legitimate interest to communicate with users and customers in accordance with Art. 6 (1)(f) GDPR.

LinkedIn's services require data to flow from the European Union (EU), the European Economic Area (EEA), and Switzerland to the United States (U.S.) and back. Therefore, LinkedIn Ireland Unlimited Company concluded Standard Contractual Clauses (SCC) with its service providers and LinkedIn Company. For more details, see the privacy policy of LinkedIn.

The services provided by XING also require data transfers outside the Europea Union (EU) and the European Area (EEA). In general, New Work SE concluded Standard contractual Clauses with its service providers. For more details, see the privacy policy of XING.

LinkedIn retains your personal data as long as you keep your account open or as needed to provide you services. This includes data you or others provided to LinkedIn and data generated or inferred from your use of LinkedIn’s services. Even if you only use LinkedIn’s services when looking for a new job every few years, LinkedIn will retain your information and keep your profile open, unless you close your account. In some cases, LinkedIn chooses to retain certain information (e.g., insights about services use) in a depersonalized or aggregated form.

XING retains your personal data until you close your account. XING may also save certain information (e.g. employer reviews) in an anonymous form beyond this point.

The provision of your personal data is neither legally nor contractually required. However, you cannot interact with us or our content on LinkedIn or XING without this provision.

Youtube

We maintain a profile on the platform YouTube, a service provided by YouTube, LLC (hereinafter referred to as ‘YouTube’), a subsidiary of Google, LLC (hereinafter referred to as ‘Google’), mainly to share tutorials videos on how to best use our products. We also share videos informing about product updates, as well video recordings from, e.g., conference presentations. Personal data will be processed by the use of the comment function.

The privacy policy of Google applies:

The processing occurs on our legitimate interest to communicate with our users and to provide support on the usage of our products in accordance with Art. 6 (1)(f) GDPR.

Youtube and Google may process your data in the United States of America. An adequate level of data protection is ensured via Standard Contractual Clauses.

Google may retain your data for longer periods of time. Some data can be deleted by you or will be deleted automatically. For more details, see the privacy policy of Google.

The provision of your personal data is neither legally nor contractually required. However, we cannot communicate with you without this provision.

Cookies

"Cookies" are small files that are stored on the user’s computer. A variety of information can be saved in a cookie. The primary purpose of a cookie is to save information about a user (or the device on which the cookie is saved) during their visit to a website or after they visit a website. Temporary cookies (also known as session cookies or transient cookies) are cookies that are deleted after a user leaves a website and closes their browser. This type of cookie may save the contents of a shopping cart in a web shop or a login status. Permanent or persistent cookies are cookies that remain on the user’s device after they close their browser. For example, these cookies allow a website to save a user’s login status if the user visits the website again after a few days. This type of cookie may also save information on the user’s interest that could be used for web analytics or marketing purposes. Third-party cookies are cookies that belong to providers other than the controller responsible for the online offer (if the cookies only belong to the controller responsible for the online offer, these are known as “first-party cookies”). We may use temporary and permanent cookies on our website.

If users do not want cookies to be saved on their computer, we ask that they deactivate the appropriate option in the system settings of their browsers. Saved cookies can be deleted in your browser’s system settings. If you do not allow cookies to be saved on your browser, this could limit the functions of our website that you can use.

You can find out more about generally opting out of the use of cookies that are saved for the purposes of online marketing for a number of services, and for tracking in particular, on the American website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. Furthermore, you can prevent cookies from being stored on your computer by switching off that option in your browser’s settings. Please note that, if you choose to do this, you may not be able to use all of the functions of this online offer.

Use of technically required cookies

We use cookies to make our website more user-friendly. Some elements of our website require that the respective browser be identified, even after a page change.

The processing occurs according to Art. 6 (1)(f) GDPR, based on our legitimate interest in the user-friendly design of our website.

For the details on the cookies we use and their retention period see our list of cookies below.

Recipients of the data may be technical service providers, who work on the operation and maintenance of our website as the processor. For this, we have the corresponding data processing agreement with the service providers.

The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data the service and functionality of our website are not guaranteed. Further, individual services may be unavailable or limited.

Use of cookies that are not technically required

Parts of our websites use “cookies”. These are small text files, hidden behind this standard technology, which are stored on the device you are using and–among other things–make visiting a website more comfortable or more secure. Cookies can also be used to better tailor the offering on a website to the interests of the visitors or generally to improve the offer on the basis of statistical evaluations.

We use the web-analysis technologies of the following providers:

  • Google AdWords
  • Google DoubleClick
  • Matomo
  • Youtube

The respective legal basis for this processing is your consent (Art. 6 (1)(a) GDPR).

For the details on the cookies we use and their retention period see our list of cookies below.

Recipients of the data may be technical service providers, who work on the operation and maintenance of our website as the processor. For this, we have the corresponding data processing agreement with the service providers.

The provision of the aforementioned personal data is neither legally nor contractually required. Of course, you can view our website without cookies. Internet browser are regularly configured to accept cookies. In general, you can disable the use of cookies via your browser settings at any time (see “Withdrawal of consent”). However, without this data individual services of our website may not work or be unavailable or limited.

In the remaining Privacy Policy you will find additional information regarding the recipients of the above mentioned services, details of the technical functionality of the tools as well as how the data transfer (tracking) can be prevented.

Google AdWords

We use Google AdWords to position advertisements on the Google advertising network (e.g., in search results, in videos, on websites, etc.) so that these advertisements are shown to users who may be interested in seeing them. This allows us to use advertisements for and within our online offer in a more targeted manner in order to present users with advertisements that could potentially interest them. For these purposes, when a user access our website and other websites on which the Google advertising network is active, Google immediately creates a code and what are known as “(re)marketing tags” (invisible images or code, also known as “web beacons”) are integrated into the website. These allow the website to save an individual cookie, i.e. a small file, on the user’s end device (comparable technology may be used instead of cookies). This file contains information on which websites the user has visited, which content they expressed interest in and which offers they clicked on, as well as technical information on the user’s browser and operating system, referring websites, the time they spend on the website and other information on how the user uses the online offer.

Further, we receive an individual "conversion cookie". The information collected with the help of the cookie allows Google to compile conversion statistics for us. However, we only receive an anonymous total number of users who have clicked on our ad and were sent to pages that contain a conversion tracking tag. We do not receive any information that would allow us to personally identify any users.

The users’ data is processed pseudonymously on the Google advertising network. This means Google does not save or process users’ names or e-mail addresses, but rather processes the relevant cookie-related data within the pseudonymous user profile. This means, from Google’s perspective, the ads are not managed for and shown to a concretely identified person, but rather for the cookie owner, regardless of who the cookie owner is. This does not apply if a user has expressly allowed Google to use their data without pseudonymization. The information collection about the user will be transmitted to Google and stored on Google’s servers in the US.

Google may process your data in the United States of America. An adequate level of data protection is ensured via Standard Contractual Clauses.

You can find more information on how Google uses data as well as how you can change your settings or withdraw your consent in Google’s privacy policy (https://policies.google.com/technologies/ads) and in Google’s ad settings (https://adssettings.google.com/authenticated).

Google DoubleClick

This website uses the remarketing function “DoubleClick” by Google. This makes it possible to present interest-based advertising to the website visitor within the Google advertising network. The cookie is used to recognize a visitor when he visits websites that are part of the Google advertising network. There, the visitor may be shown advertising that relates to content that was previously accessed on websites that use the same remarketing tools.

Google may process your data in the United States of America. An adequate level of data protection is ensured via Standard Contractual Clauses.

Matomo

As part of Matomo’s web analytics, the following data is processed: your browser type and version, your operating system, your country of origin, the date and time of your server request, the number of times you visit the website, the amount of time you spend on the website, and the external links you click on. The users’ IP addresses are anonymized before they are saved.

Matomo uses cookies that are saved on the user’s computer and that allow them to analyze how the user uses our online offer. Pseudonymous use profiles on the users may be created using the processed data. The cookies are saved for one week. The information generated by the cookie regarding your use of this website is only stored on our server and will not be given to third parties.

Users may withdraw their consent to anonymous data collection by Matomo with effect for the future at any time by clicking the link below. In this case, an “opt-out cookie” will be stored in your browser which will prevent Matomo from collecting session data. When a user deletes their cookies, however, the opt-out cookie will also be deleted and must be reactivated by the user.

YouTube

We embed YouTube videos on our website. The operator of the respective plugins is YouTube, LLC (hereinafter ‘YouTube’). YouTube, LLC is a subsidiary of Google LLC, (hereinafter ‘Google’). When you visit a page with the YouTube plug-in, a connection to YouTube’s servers will be created, which tells YouTube which pages you visit. When you are logged into your YouTube account, YouTube can associate your browsing behaviour with you personally. You can prevent this by logging out of your YouTube account beforehand. If a YouTube video is started, the provider uses cookies that collect information about user behaviour. Visiting YouTube automatically triggers a connection to Google.

By providing videos on the Youtube video platform, our servers are relieved and we can use the saved computing power elsewhere. This in turn contributes to our system stability and allows us to offer a wider range of services.

Everyone who has disabled the storage of cookies for the Google ad program will not have to expect any cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you would like to prevent this, you must block the storage of cookies in the browser.

Youtube and Google may process your data in the United States of America. An adequate level of data protection is ensured via Standard Contractual Clauses.

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional limitations on the website.

You will find additional information on the purpose and scope of the data collection and its processing by YouTube in the provider’s privacy policy, as well as additional information on your rights and setting options for protecting your privacy (https://policies.google.com/privacy).

Matomo Opt-In

Privacy policy for further purposes unrelated to the Website

Processing of your data in the context of Events

The data entered by you will be collected and stored for the purpose of individual communication with you and for the execution of the event. The information you have provided will also be stored for the purpose of processing any arising follow-up questions concerning the event. This enables us to optimize the events and tailor them to your needs. Processing is carried out for the purpose of implementing pre-contractual and contractual measures (Art 6 (1)(b) GDPR).

We use also your contact details to inform you about similar events and products advertised during the events. Your data will be forwarded to our sales partners so that they can advise and inform you about our products. The data provided for the event is processed for advertising purposes on the basis of a legitimate interest (Art 6 (1)(f) GDPR).

If you wish to be contacted by electronic mail, your consent is required (Art. 6 (1)(a) GDPR). We or our distribution partners will contact you exclusively for the purpose of presenting our products to you.

If necessary to carry out the event, service providers employed by us may receive data for these purposes, insofar as they require the data to fulfil their respective service (e.g. IT services). All service providers are contractually obliged to treat your data confidentially.

Data will no longer be processed for advertising purposes if you object to this processing. If the processing is based on consent, your data will no longer be processed as soon as you revoke your consent (see above). Otherwise we will delete your data if they are no longer required or if you have objected to their processing, as far as there are no legal retention regulations to the contrary.

The provision of your personal data is voluntary. However, we can only process the participation in the event or contact you if you provide us with the information required for billing and ticket issuing.

Processing your data in the context of the digital events

The data entered by you will be collected and stored for the purpose of individual communication with you and for the execution of the event. Processing is carried out for the purpose of implementing pre-contractual and contractual measures (Art 6 (1)(b) GDPR).

A digital business card is created from the data you enter. This business card will be made available to the other participants. At the same time, you have the opportunity to learn more about the other participants. This allows the participants to get to know each other and enables a better exchange of opinions. Processing is carried out on the basis of a legitimate interest on the provision of an uncomplicated contact (Art 6 (1)(f) GDPR).

To be able to improve our events in the future and to increase their attractiveness, we record your activities on the platform. This includes, for example, staying in various rooms and watching lectures. Points can also be earned through these activities. The three participants with the most points will receive a prize. For further information on the competition, please refer to the conditions of participation. Processing is carried out on the basis of a legitimate interest (Art 6 (1)(f) GDPR).

We will process your data provided for the purpose of contacting you for further events. For this purpose you will receive an E-Mail asking if you prefer not to be contacted for further events.

If necessary, service providers employed by us may receive data for these purposes, insofar as they require the data to fulfil their respective service. All service providers are contractually obliged to treat your data confidentially.

Data will no longer be processed if you object to this processing. In addition, we are subject to the legal retention periods.

The provision of your personal data is voluntary or necessary for the fulfillment of the contract. We can only process the participation in the event or contact you if you provide us with your name and e-mail address.

Webinars

When registering for our free webinars, your data will be collected and stored for the purpose of conducting the webinar and communicating with you during the webinar. Processing is carried out for the purpose of implementing pre-contractual and contractual measures (Art 6 (1)(b) GDPR).

In return for your free participation, we may contact you regarding the webinar content or forward your registration information to the appropriate sales partner in your country for contact.

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of the webinar. For this purpose, we have concluded the corresponding data protection contract with the providers.

For the execution of our webinars we use the tool “GoToWebinar” by the provider LogMeIn, Inc. takes place in the United States of America. An adequate level of data protection is ensured via Standard Contractual Clauses.

We will delete your data if they are no longer required or if you have objected to their processing, as far as there are no legal retention regulations to the contrary.

The provision of personal data is not required by law or contract. However, it is not possible to participate in the webinar without providing this information.

Contractual services

We process data concerning our contractual partners and interested parties as well as other clients, customers, contractors, or business partners (collectively referred to as “business partners”) in accordance with Article 6(1)(b) GDPR in order to provide them with our contractually agreed upon services or to perform the necessary steps prior to entering into a contract. We also process the data to fulfil legal obligations in accordance with Article 6(1)(c) GDPR.

We only provide this data to external persons or companies if required within the provisions of a contract.

The data will be deleted if it is no longer required for the performance of contractual or legal obligations or for the performance of warranty obligations or comparable obligations, whereby the necessity of the storage of data will be reviewed every three years; otherwise statutory retention obligations apply.

The provision of the data is required by law and/or contract. Without the provision of the necessary data, we cannot provide our services.