Privacy policy statement

1. Name and address of the data controller

The responsible persons according to the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations are:

For Infraray GmbH:
Infraray GmbH
Stromstr. 5
10555 Berlin, Germany
Tel.: +49 (0)30 – 254 690 -0
E-mail: info(at)infraray.com
Website: www.infraray.com

2. Name and address of the data protection officer

Data protection officer of the data controller:
Gerhard Smischek
Tel.: +49 (170) 234 7311
E-mail: datenschutz(at)infraray.com

3. Description and scope of data processing

a) Automated data collection
Each time you visit our website, our system automatically collects data and information from the computer system of the computer that called up our site. This information is temporarily stored in a so-called log file. The following information is collected and stored automatically as part of this process:

Information about the browser type and version used
The operating system of the user
The IP address of the user
Date and time of access

The log files are automatically deleted after four weeks. The aforementioned data is processed by us in order to ensure trouble-free connection to the website and a smooth user experience. In addition, processing of the collected data allows us to evaluate the system stability and security.

The legal basis for temporary data storage is provided in Art. 6 Sec. 1 lit. f GDPR. Our legitimate interest derives from the aforementioned data collection purposes. We do not use the collected data for the purpose of drawing conclusions about your person.

Our website uses cookies as well as analytics services, which are explained in sections 4 and 5.

b) Contact form and e-mail contact
A contact form is available on our website, which can be used to contact us by electronic means. When a user draws on this option, the data entered in the input screen will be transferred to us and stored. This data includes:

The user’s first and last name as well as the form of address
Company of the user
E-mail of the user
Telephone number of the user (optional)

At the time of sending the message, the following data is also automatically transmitted and stored:

The IP address of the user
Date and time of sending

Your consent to the processing of this data will be obtained during sending with reference to this privacy statement.

Alternatively, you can use the listed e-mail addresses to contact us. In this case, the user’s personal data communicated in the e-mail will be stored.

The processing of personal data collected in the contact form serves to process the contact. In the case of contact by e-mail, too, the processing of the contact constitutes our required legitimate interest.

Other personal data collected automatically during sending are used to ensure the security of our information technology systems and to prevent misuse.

The data will be processed for the purpose of contacting us in accordance with Art. 6 Sec. 1 S. 1 lit. a GDPR on the basis of your voluntary consent. The legal basis for processing data transmitted as part of sending an e-mail is provided in Art. 6 Sec. 1 lit. f GDPR.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. As regards personal data from the input screen of the contact form and those sent via e-mail, this is the case when the respective conversation with the user has been concluded. The conversation is considered concluded when the circumstances indicate that the matter in question has been clarified conclusively.

The personal data collected automatically during sending will be deleted after a period of four weeks at the latest.

c) Using our online support
Our online support (customer helpdesk, requirements, documentation, support newsletter, PTF download, working groups) is only available to licensed customers and requires a one-time registration on our website. The following data is collected as part of the registration process:

The user’s first and last name as well as the form of address
Customer number of the user
Company of the user
Corporate position of the user
E-mail of the user
Telephone number of the user (optional)
Country of origin of the company (optional)

At the time of registration, the following data is also automatically transferred and stored:

The IP address of the user
Date and time of registration

User registration is necessary for the provision of certain content and services on our website or for the registration for events or user groups. The data will be processed within the scope of online support in accordance with Art. 6 Sec. 1 S. 1 lit. a GDPR on the basis of your voluntary consent. If the registration serves the fulfillment of a contract of which the user is a contractual partner, Art. 6 Sec. 1 lit. b GDPR serves as an additional basis for processing of the data.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. As regards data collected during the registration process, this is the case if the registration on our website is canceled or modified. As regards data collected during the registration process for the fulfillment of a contract, this is the case when the data is no longer required to perform the contract. Even after fulfillment of the contract, it may be necessary to store personal data of the contractual partner in order to comply with contractual or legal obligations.

The personal data collected automatically during sending will be deleted after a period of four weeks at the latest.

d) Registration for our newsletter
Our website provides you with the option of subscribing to our free newsletter. Only the e-mail address is required to subscribe to the newsletter.

In addition, the following data is collected during registration:

The IP address of the user
Date and time of registration

The legal basis for processing data after your subscribing to the newsletter is the voluntary consent of the user pursuant to Art. 6 Sec. 1 lit. a GDPR.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user’s e-mail address will be deleted as soon as the user cancels their subscription. You may unsubscribe at any time by clicking a link at the bottom of each newsletter or by sending an e-mail with your unsubscribe request to unsubscribe(at)infraray.com at any time.

The additional data collected automatically during registration will be deleted after a period of four weeks at the latest.

4. Data privacy during applications and the application process

The controller collects and processes the personal data of applicants for the purpose of handling the application procedure. Processing may also be carried out electronically. This is the case, for example, if the applicant sends his or her application by e-mail.

Applicants also have the option of applying via the applicant portal. In this case, we use the “softgarden” online application tool from softgarden e-recruiting GmbH, Tauentzienstr. 14, 10789 Berlin, Germany. Applicants who use the online application tool will be redirected from our website to the softgarden website. softgarden e-recruiting GmbH processes the application data on our behalf. Click the following link to get further information on how your data entered via the applicant portal is collected, processed and stored https://betasystems.softgarden.io/de/data-security.

The data will be used exclusively for the current application process.

By registering or applying with us, you give us your consent to collect, process and store the personal data you provide and to transmit it to the departments of the relevant Beta Systems Group companies responsible for handling the application. Furthermore, you agree that we may contact you as part of the application process using the communication details provided.

If an employment contract is concluded, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with statutory provisions.

If the data controller does not conclude an employment contract with the applicant, the data will be stored for two months after completion of the application process and deleted after the expiration of these two months, provided that no other legitimate interests as set out in Art. 6 Sec. 1 lit. f GDPR conflict with the deletion. Other legitimate interests according to this provision include, for example, the duty to provide evidence in proceedings under the General Act on Equal Treatment (AGG).

The basis for data processing is provided in Art. 6 Sec. 1 lit. a and b. GDPR.

5. Use of cookies

Our website uses cookies. Cookies are text files that are stored in the Internet browser or on the user’s computer system by the Internet browser. When a user accesses a website, a cookie may be stored on the user’s system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the user visits the website again.

On our website we use cookies that allow us to analyze the users’ surfing behavior.

In this way, the following data may be transmitted:

Entered search terms
Frequency of page views
Use of website functions

The user data collected in this way is pseudonymized by technical means. Therefore, it is not possible to match the data with the calling user. The data is not stored together with other personal user data.

When accessing our website, an info banner informs users about the use of cookies and refers to this privacy policy. Information on browser settings that prevent cookies from being stored is provided at the end of this section.

The legal basis for processing personal data using cookies is provided in Art. 6 Sec. 1 lit. f GDPR.

The analysis cookies are used for the purpose of improving the quality of our website and its content. Analysis cookies help us learn how the website is being used, and these insights allow us to constantly optimize our site. These purposes also represent our legitimate interest in the processing of personal data pursuant to Art. 6 Sec. 1 lit. f GDPR.

Cookies are stored on the user’s computer and transmitted from it to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been saved can be deleted at any time. This process can also be automated. If you disable cookies for our website, you may no longer be able to use all functions of the website to their full extent.

6. Use of tracking tools

a) Matomo
We use Matomo (formerly Piwik) for web analytics, a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769, (“Matomo”) using cookie technology. The protection of your data is important to us, which is why we have additionally configured Matomo in such a way that your IP address is only recorded in shortened form. We therefore process your personal usage data anonymously. It is not possible for us to draw conclusions about your person. You can find more information on the Matomo terms of use and the data protection regulations at: https://matomo.org/privacy/.

b) WiredMinds
Our website uses the counting pixel technology of WiredMinds GmbH(wiredminds.de) to analyze visitor behavior.

In the process, data may be collected, processed and stored for the purpose of creating usage profiles under a pseudonym. To the extent possible and feasible, these usage profiles will be completely anonymized. Cookies may be used in the process. Cookies are small text files that are stored in the visitor’s Internet browser to recognize the Internet browser when users return to the site. The data collected, which may include personal data, is transmitted to WiredMinds or collected directly by WiredMinds. WiredMinds may use information generated when users visit web pages to create anonymized usage profiles. The data obtained in this way will not be used to personally identify the visitor to this website without the additional, explicit consent of the person concerned, and the data will not be merged with personal data about the bearer of the pseudonym. If IP addresses are recorded, they are immediately anonymized by deleting the last number block.

You can object to data collection, processing and storage at any time with effect for the future under the following link: Exclude from website tracking

c) Legal basis for data processing
The use of the aforementioned tracking tools is based on the legal provisions of Art. 6 Sec. 1 lit. f GDPR (legitimate interest). Our interest pursuant to Art. 6 Sec. 1 lit. f GDPR (legitimate interest) is the continuous optimization of our online offer and our website.

7. Use of Google tools

a) Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that allows us to embed tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It only serves to manage and play out the tools integrated via it. However, the Google Tag Manager records your IP address, which may also be transferred to Google’s parent company in the United States.

The use of the Google Tag Manager is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in a quick and uncomplicated integration and management of various tools on his website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

b) Google Ads
Google Ads are used on this website. Google Ads is an online advertising program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to play advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be played on the basis of user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analyzing, for example, which search terms have led to the display of our advertisements and how many ads have resulted in corresponding clicks.

The use of this service is based on your consent in accordance with Art. 6 Para. 1 lit. a DSGVO and § 25 Para. 1 TTDSG. The consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

c) Google Conversion Tracking
This website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Conversion Tracking, Google and we can recognize whether the user has performed certain actions. For example, we can evaluate which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We learn the total number of users who clicked on our ads and what actions they took. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be revoked at any time.

You can find more information about Google conversion tracking in Google’s privacy policy: https://policies.google.com/privacy?hl=en.

8. Social plug-ins

We do not use links to social networks that already contain the code of the respective external network on our pages, so-called “social plug-ins”. We only provide simple links added by us, so no data is passed on to external site operators while you are on our site.

9. Retention period and data deletion

The personal data of the data subject is deleted or blocked as soon as the retention purpose ceases to apply. Above and beyond this, data retention may take place if this has been provided for by the European or national legislator in regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a retention period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or fulfillment of a contract.

10. Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below. We will only disclose your personal data to third parties if:

a) you have given your express consent to this in accordance with Art. 6 Sec. 1 S. 1 lit. a GDPR,
b) the disclosure is necessary for the assertion, exercise or defense of legal claims pursuant to Art. 6 Sec. 1 S. 1 lit. f GDPR and there is no reason to assume that you have an overriding and legitimate interest in the non-disclosure of your data,
c) a legal obligation exists for disclosure pursuant to Art. 6 Sec. 1 S. 1 lit. c GDPR, as well as
d) this is legally permissible and necessary according to Art. 6 Sec. 1 S. 1 lit. b GDPR for the processing of contractual relationships with you.

11. Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is being carried out on the basis of Art. 6 Sec. 1 lit. e or f GDPR; this also applies to profiling based on these provisions unless we can demonstrate that there are compelling legitimate grounds for the processing which, exceptionally, override your interests, rights and freedoms; as regards processing for the purposes of direct marketing, you may object at any time.

12. Rights of the data subject

If your personal data is processed, you are considered a data subject within the scope of the GDPR and you have the following rights vis-à-vis the data controller:

a) Right to information
You have the right to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on the details.

b) Right to rectification
You have the right to have incorrect or incomplete personal data stored by us corrected without delay.

c) Right to deletion
You can request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

d) Right to restriction of processing
You have the right to request the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you object to our deleting the data, even if we no longer need it, because you require it to assert, exercise or defend legal claims, or if you have filed an objection to the processing pursuant to Art. 21 GDPR.

e) Right to information
If you have asserted the right to rectification, deletion or restriction of processing against the data controller, the controller is obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed about these recipients by the data controller.

f) Right to data portability
You have the right to receive a copy of your personal data provided to us in a structured, current and machine-readable format or to request the transmission to another controller.

g) Right to revocation of the declaration of consent under data protection law
You can revoke your consent towards us at any time. As a result, we may no longer continue data processing based on this consent from that point onward. h) Right to file a complaint with a supervisory authority You have the right to lodge a complaint with a supervisory authority in the Member State of your residence, workplace or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR.

13. Updates

We reserve the right to update this privacy policy from time to time. Updates to this privacy policy will be posted on our website. Changes become valid upon their publication on our website.

Last changed: June 2023