Software in the Spotlight
Legal information

Privacy Policy

We are pleased about your interest in our website. The protection of your personal data during its collection, processing, and use is an important concern for us. Personal data (hereinafter referred to as "data") are data that can be used to personally identify you.

Below, we would like to inform you in detail about the data collected during your visit to our website and the use of our offers there, and how these are processed or used by us, as well as the accompanying technical and organizational protective measures we have taken.

1. Responsible entity and contact person for data protection issues

The controller in the sense of the General Data Protection Regulation (GDPR) and at the same time service provider in the sense of the German Digital Services Act (Digitale-Dienste-Gesetz, DDG) as well as provider of digital services in the sense of the Telecommunications Digital Services Data Protection Act (TDDDG) is:

ASCOMP Software GmbH, Hauptmannsreute 6, 70192 Stuttgart, Email: support@ascompsoftware.com

Further information about the responsible entity can be found in the imprint.

You can contact our data protection officer as follows: support@ascompsoftware.com

2. Collection and use of usage data when visiting the website

2.1 Server logs

Every access to our website is logged. The storage serves internal system-related and statistical purposes. Logged are:

We process these data exclusively in non-personal form for informational visits. These data will not be combined with other data sources. We reserve the right to check these data retrospectively if we become aware of specific indications of illegal use. Additionally, the IP addresses of the requesting computers are logged. These data are captured anonymously; a personal reference is also not possible.

The collection of these data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free and optimal presentation of his website – for this purpose, server log files must be recorded.

2.2 Pseudonymous Visitor and Pop-up Analysis

In addition, we store a pseudonymous record for each visitor. It contains a hash (an irreversible checksum) of the IP address and user agent, generated with a secret key, the referral information (referrer or campaign parameter in the address), the time of the visit, and whether the notice about push notifications was displayed or accepted and whether a push subscription exists. The IP address itself is not stored in this record.

We use this data to evaluate and improve the reach of our website, the effectiveness of our campaigns, and our notices. The processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in optimizing our offer). You may object to this processing in accordance with section 4.

3. Collection and Use of Your Personal Data

Insofar as you have provided us with personal data, we use these to respond to your inquiries, for the establishment, content design, modification, fulfillment, billing, or processing of contractual relationships, and – within the legally permissible framework – for our own advertising purposes.

3.1 Inquiries

If you send us inquiries by phone, chat, email, fax, letter, or through visits, your details from the inquiry, including the contact details you provided there, will be stored by us for the purpose of processing the request and in case of follow-up questions. We do not pass on these data without your consent unless we are legally obliged to do so.

We process these data to be able to respond to your inquiry.

The data transmitted by the above-mentioned means of communication and the communication for answering your inquiry are encrypted and archived for a period of 2 months and stored in this form for a duration of 1 year, in case further inquiries arise.

Insofar as your inquiry relates to an existing contractual relationship with you or you are interested in concluding a contract, for example, purchasing one of our products, and you approach us, the aforementioned data processing is based on the legal basis of Art. 6 para. 1 sentence 1 lit. b) GDPR (contract initiation and fulfillment). Otherwise, the data processing is based on the legal basis of Art. 6 para. 1 sentence 1 lit. f) GDPR (balance of interests, our interest is to be able to answer your inquiry with the relevant information for you). The data you provide will remain with us until you request us to delete them, in the case of contract-relevant communication until after the commercial law retention periods (usually 10 years) have expired or until the purpose for data storage ceases to apply (e.g., after the completion of processing your inquiry). Mandatory statutory provisions – especially retention periods – remain unaffected.

3.2 Newsletter Registration

This website offers registration for a newsletter and for push notifications only (see section 3.6). If you subscribe to the newsletter, we require your email address and the records necessary for double opt-in and newsletter delivery. No other personal data is required and additional data is collected only if you provide it voluntarily.

The newsletter informs you by email about newly available software offers, giveaways, and comparable campaigns on our website. This website does not provide customer accounts, software purchases, or any other registration for the use of software.

We process your data exclusively to send the newsletter and manage your consent. The processing is based on your consent under Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time with effect for the future, for example via the unsubscribe link in the newsletter or by email to support@ascompsoftware.com.

We use SMTP2GO (SMTP2GO, 24B Moorhouse Ave, Addington, Christchurch 8011, New Zealand) to send the newsletter. The data entered for newsletter registration is processed exclusively on servers located in Europe. Further information is available in SMTP2GO's privacy policy.

Your email address is stored until you withdraw your consent and is then deleted from the newsletter distribution list unless statutory retention obligations require otherwise. It is not disclosed for other purposes.

3.3 Contract Initiation and Execution with Suppliers

We collect, process, and use personal data only insofar as they are necessary for the establishment, content design, or change of the legal relationship (inventory data). This is done based on Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. Personal data about the use of our internet pages (usage data) are collected, processed, and used only to the extent necessary to enable the user to use the service or to bill for it.

The collected supplier data are deleted after completion of the order or termination of the business relationship, but not before the expiry of the statutory retention periods (usually 10 years).

We transfer personal data to third parties only if this is necessary within the framework of contract processing; for example, to a company entrusted with the delivery of goods or the credit institution entrusted with payment processing. Further transmission of the data does not take place or only if you have expressly consented to the transmission. The transfer of your data to third parties without explicit consent, for example, for advertising purposes, does not occur.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which allows the processing of data for the fulfillment of a contract or pre-contractual measures.

3.4 Newsletter Data

If you would like to receive the newsletter offered on this website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and that you agree to receive the newsletter. No further data is collected or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

For sending newsletters and mailings we use the SMTP2GO service (SMTP2GO, 24B Moorhouse Ave, Addington, Christchurch 8011, New Zealand). The data you provide for the purpose of subscribing to the newsletter is stored exclusively on servers located in Europe, ensuring GDPR compliance.

For more information on how this provider handles personal data, please see SMTP2GO's privacy policy.

We have concluded data processing agreements with both providers and fully comply with the strict requirements of the German data protection authorities when using these services. As our processor, SMTP2GO is not considered third party within the meaning of data protection law.

The processing of the data entered in the newsletter registration form takes place exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You may revoke the consent you have given to the storage of the data, the e-mail address, and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The lawfulness of the data processing operations already carried out remains unaffected by the revocation.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from the distribution list after you unsubscribe or when the purpose no longer applies. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

Data that has been stored by us for other purposes (e.g. e-mail addresses for contractual communication) remains unaffected.

After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us in a blacklist if this is necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements for sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is not limited in time.

You may object to this storage if your interests outweigh our legitimate interest.

3.5 Processing for Compliance with Legal Obligations

We also process all personal data mentioned in the previous points as far as necessary for the fulfillment of legal obligations, e.g., commercial and tax laws (Art. 6 para. 1 c GDPR). These obligations include, in particular, compliance with tax-related control and reporting obligations as well as the archiving of data for data protection and data security purposes and the examination by tax and other authorities.

Furthermore, the disclosure of personal data may become necessary within the framework of official/judicial measures for the purposes of evidence collection, prosecution, or enforcement of civil law claims.

3.6 Push Notifications

If you enable push notifications, we inform you through your browser about new giveaways, coupons, and discount campaigns. Enabling them is voluntary. It only takes place after you have clicked “Subscribe” or “Activate” and expressly allowed notifications in your browser.

We store the push address (endpoint) generated by your browser together with the associated keys, your language setting, the subscribed topics (giveaways and discounts), the browser identifier (user agent), and the time of registration. We also link the registration to the pseudonymous visitor record described in section 2.2 in order to evaluate which route registrations come from. A service worker that receives the messages is installed on your device. In addition, your browser's local storage (“localStorage”) records that the notice has already been shown to you. We also count how often a notification was displayed and clicked; this count is kept per notification and is not personal.

Notifications are delivered through the push service of your browser vendor (e.g., Google, Mozilla, Apple, or Microsoft). Messages are transmitted in encrypted form. For technical reasons, the respective provider receives the push address and connection data and may also process them in third countries (e.g., the USA). Further information is available in the privacy notices of the respective browser vendor.

The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, Section 25 para. 1 TDDDG). You may withdraw your consent at any time with effect for the future: in your browser settings under site permissions or notifications (in many browsers via the lock icon next to the address) or by email to support@ascompsoftware.com. The lawfulness of the processing carried out until withdrawal remains unaffected.

We store your push subscription until you withdraw your consent. If the push service reports a subscription as invalid (e.g., because you have withdrawn it in your browser), we block it and send no further messages.

4. Right to Object to Data Collection in Specific Cases and Against Direct Advertising (Art. 21 GDPR)

If data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which a processing is based can be found in this privacy policy.

If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.

If your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes.

It is best to send an objection informally by email to us at: support@ascompsoftware.com

5. Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. We will expressly obtain your consent before starting the data processing. You can revoke this consent at any time. An informal email to us is sufficient: support@ascompsoftware.com

The legality of the data processing carried out until the revocation remains unaffected by the revocation.

6. Involvement of Service Providers and Disclosure to Third Parties

Your data will be passed on to technically supportive service providers (e.g., website/mail hosting) for the provision of this website and for the purposes mentioned above, which we have, of course, carefully selected and commissioned in writing.

These service providers are bound by our instructions and are regularly monitored by us.

Otherwise, your data will only be passed on to other third parties if expressly indicated in this privacy policy or if we are legally obliged to do so.

7. Data Security

We also implement technical and organizational security measures to protect accruing or collected personal data, especially against accidental or intentional manipulation, loss, destruction, or against the attack of unauthorized persons. Our security measures are continuously improved in line with technological developments.

We would like to point out that data transmission over the Internet (e.g., when communicating by email) can have security gaps. A complete protection of data against access by third parties is not possible. For confidential information, we recommend sending it by post.

SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the change in the address line of the browser from "http://" to "https://" and by the lock symbol in your browser line.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Encrypted Payment Transactions on This Website
After the conclusion of a chargeable contract, you are obliged to provide us or the payment provider with certain payment data required for payment processing. Without such a payment, a chargeable contract cannot be carried out.
The payment transactions via the common means of payment (credit card, PayPal, etc.) are carried out exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the change in the address line of the browser from "http://" to "https://" and by the lock symbol in your browser line.
In encrypted communication, your payment data that you transmit to us cannot be read by third parties.

If you select the payment method “Stripe”, we will pass on your personal data to the Stripe Payments Europe Ltd,7th Floor, The Bower Warehouse, 211 Old Street, London EC1V 9NR, UK ("Stripe") for the purpose of payment processing, to the extent necessary for payment processing. Further information on the handling of personal data by Stripe can be found in Stripe's privacy policy.

If you choose the payment method “PayPal”, we will pass on your personal data to PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal") for the purpose of payment processing, to the extent necessary for payment processing. Further information on the handling of personal data by PayPal can be found in PayPal's privacy policy.

8. Information, Correction, Blocking, Deletion, Restriction of Processing

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, their origin and recipient, and the purpose of data processing, and, if necessary, a right to correction, restriction of processing, blocking, or deletion of these data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at support@ascompsoftware.com.

9. Right to Data Portability

You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done to the extent technically feasible.

10. Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of data protection law, you have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection commissioner of the federal state in which our company is headquartered.

The supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information
Lautenschlagerstrasse 20
70173 Stuttgart

11. Changes to This Privacy Policy

We reserve the right to change these data protection provisions at any time in compliance with legal requirements.