Responsible Legal Entity
Responsible in the sense of the general data protection regulation (GDPR ger. DSGVO) as well as the national data protection laws is:
illucIT Software GmbH
97072 Würzburg, Germany
Tel.: +49 931 / 99161950
If you have questions about data protection, you can contact our office under the above-mentioned data.
Processing of Personal Data
We collect and use your personal information regularly only after you have given us your consent. Should it not be possible to obtain your consent for some reasons, we are exceptionally entitled to collect and use your personal data if processing is permitted by law.
We only collect and use your personal data insofar as they are necessary for the functionality of our website as well as for the provisioning of the content of our website as well as potential contract initiation or contract fulfillment.
Affected Persons and Categories of Personal Data
The processing of personal data affects all visitors and users of our website.
As part of our webpage, the following data will be processed:
- Contact details (e.g., e-mail address)
- Content data (e.g., text input)
- Usage data (e.g., visited web pages, access times)
- Meta / communication data (e.g., device information, IP addresses)
Legal Basis for the Processing of Personal Data
In this section we would like to inform you about the legal basis of the processing of your personal data. If we obtain the consent of the data subject for a processing operation, Art. 6 para. 1 lit. a and Art. 7 GDPR serve as legal basis. If the personal data of the data subject are necessary for the performance of a contract or to take steps to entering into a contract, Art. 6 lit. b GDPR serves as legal basis. Insofar as your personal data is required to fulfill a legal obligation that our company is subject to (e.g. retention of invoice documents for tax reasons), Art. 6 lit. c GDPR serves as legal basis. In cases where legitimate interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as legal basis. If processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party to protect the legitimate interests of our company or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child, Art. 6 para. 1 lit. f GDPR serves as legal basis for processing.
Purpose of Processing
We process your data to provide you with the content and functionality of our website. These includes features to get in contact with you, ensure the security of our website and to measure the reach of our website.
Data Erasure and Storage Duration
We do not store your data beyond the statutory requirements. We delete or restrict processing of personal data of the data subject in accordance with Art. 17 and 18 GDPR, as well as after expiry of the respective statutory retention period, or as soon as the purpose of storage ceases to apply. For example, in Germany accounting documents according to § 147 para. 1 AO have to be kept for 10 years. However, it is possible that even after expiry of the legal period for storage, there is a need for further storage e.g. if your data is needed to initiate or fulfill a contract.
Provisioning of the Website, Collection of General information and Log Files
Opening of our website automatically leads to data and information being collected by our system about the computer system of the persons visiting our homepage. These information are stored in the so-called log files. The following information is recorded here:
- Information about the browser type and version used
- The operating system of the user
- The Internet service provider of the user
- The anonymized IP address of the user
- Date and time of access
- Websites from which the user visits our website
- Websites the user navigates to by following a link on our website
The log file information is used for security reasons e.g. for the investigation of fraud. The collection of the log file information and the temporary storage of the data is based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR.
IP addresses of the users are always anonymized before they are stored. This way the information cannot be matched to an actual person any more.
To provide this website, we use the services of a hosting provider. This includes infrastructure services, storage space, computing capacity, database services and technical maintenance and security services.
As part of these services, we and / or the hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, prospects and visitors to our website. The legal basis for processing is our legitimate interest in the secure provisioning of our website in accordance with Art. 6 para. 1 lit. f GDPR in combination with Art. 28 GDPR.
Personal Data in the Context of Contractual Services
If you contact us via our website to enter into a contractual relationship, we will process your inventory data (such as names and addresses and contact information) and contract data (such as services used) to fulfill our contractual obligations. The legal basis for the storage of your data is Article 6 para. 1 lit b GDPR. We delete your data after expiration of the warranty period and after the expiration of other comparable periods to fulfill legal obligations.
If you contact us in the context of the contact options offered, we process your specified user data to answer your contact request. In this instance the processing in done in accordance with Art. 6 para. 1 lit. b GDPR. If the storage of your contact request is no longer needed, we will delete it. The legal retention periods for archiving still apply.
We offer you the opportunity to post comments on our website on our blog. Here we have the possibility to save your IP address for 7 days. The storage is for our own security in the event that a comment violates applicable law and based on our legitimate interest in accordance to Art. 6 para. 1 lit. f GDPR.
Cookies are small files that are stored on the hard disk of a visitor. They allow information to be kept for a certain period of time. We use technically necessary cookies to operate our website.
The following data is stored and transmitted in cookies:
- language setting
Third Party Content
On our website, we do not use any third-party content.
Cooperation with Data Processors, Third Parties and Transfer of Data to Third Countries
Should we transfer, disclose or otherwise grant access to peronal data as part of the processing of data to third parties, this is done exclusively on the basis of a legal permit, a legal obligation, if you have given consent thereto, or based on our legitimate interests (e.g. in the case of the usage of a webhoster). If we delegate the processing of data to third parties, we do this on the basis of a data processing addendum according to Art. 28 GDPR.
Processing in third countries – all countries outside the European Union (EU) or the European Economic Area (EEA) – only takes place if the processing serves the fulfillment of our pre-contractual or contractual obligations and if you have given your consent to the processing or we have a legal obligation, or on the basis of our legitimate interests to have processing done in a third country. The provisions of Art. 44 et seq. apply in these cases. Special requirements have to be met for processing personal data in a third country. This includes the official provisioning of a level of privacy that complies with the regulations of the EU (e.g., “Privacy Shield” for the U.S.A.).
Rights of the Data Subject
The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, as well as access to the personal data itself.
Furthermore, according to Art. 16 GDPR you have the right to demand the the rectification of inaccurate personal data concerning you as well as the right to have incomplete personal data completed.
According to Art. 17 GDPR, you may demand the deletion of the relevant data and according to Art. 18 GDPR, to restrict the processing of the data.
According to Art. 20 GDPR you also have the right to receive the personal data concerning you, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
Furthermore you have the right to lodge a complaint with a supervisory authority (see Art. 77 GDPR).
Right of Withdrawal
You have the right to withdraw your consent for data processing at any time (see Art. 7 para. 3 GDPR).
Right of Objection
You have the right to object to the processing of data concerning you at any time (see Art. 21 GDPR).