This data protection notice provides you with information on how your personal data is processed in connection with the website emnos-insightportal.com.

Table of contents

1. 1. RESPONSIBILITY FOR DATA PROTECTION
2. 2. OPERATION OF THE WEBSITE
3. 3. DATA WE PROCESS
4. 4. TECHNICAL PROTECTIVE MEASURES AND TRACKING
5. 5. THIRD-PARTY CONTENT
6. 6. USE OF ADDITIONAL SERVICE PROVIDERS
7. 7. COOKIE INFORMATION
8. 8. STORAGE PERIOD
9. 9. YOUR RIGHTS
10. 10. DATA PROTECTION OFFICER AND CONTACT

1. RESPONSIBILITY FOR DATA PROTECTION

Responsibility for data protection regarding the operation of the website emnos-insightportal.com resides with emnos GmbH, Theresienhöhe 12, 80339 Munich. If terms such as “we” or “us” are used hereafter, they refer to emnos GmbH.

2. OPERATION OF THE WEBSITE

We process your personal data to provide you with the services available in the emnos InsightPortal. As far as you use services offered on the InsightPortal, we only process the data entered to provide the desired service.

Unless otherwise stated in the following sections, the legal basis for the associated data processing is Art. 6 Para. 1 f) DSGVO (balancing of interests – based on our interest to make this portal available to registered users).

3. DATA WE PROCESS

3.1. DATA YOU ENTER

For the above-mentioned purposes, we process, in particular, data you enter into portal forms (e.g. the login credentials). We process this data in order to give you access to the emnos InsightPortal and the services contained therein.

3.2. DATA COLLECTED AUTOMATICALLY

In order to be able to provide you with suitable information on the portal, we also process the following data:

• The addresses of the pages you visited in our portal
• The date and time of your visit
• The properties of your device, especially the operating system, the browser used
• The IP address of your device on the internet
• Your User ID (i.e. your login name for our portal)
• Successful logon events
• Failed logon attempts.

Furthermore, we use cookies to identify your end device. Cookies are small text files placed on your end device while visiting certain sites on the internet used to identify your device. You can find further information on cookies here.

4. TECHNICAL PROTECTIVE MEASURES AND TRACKING

4.1. TECHNICAL PROTECTIVE MEASURES

We use various tools to detect and eliminate technical faults on our portal. Other tools help us to detect and prevent possible attacks on our portal. For this purpose we use the automatically collected data mentioned in section 3.2 above.

4.2. TRACKING FOR WEBSITE ANALYSIS

Our goal is to design our emnos InsightPortal in the best possible way. We therefore use tracking mechanisms to improve our online offerings. The tracking mechanisms enable us to measure the use of our service offerings. In particular, we use the tracking mechanisms to collect the following information:

• Which of our pages/products/features are visited/used when, how often, and in which order?
• What information are users looking for on our emnos InsightPortal?
• Which links or services do users of our InsightPortal click on?
• Which flows/processes are aborted by the user?

Using this information, we compile statistics that help us to understand the following questions:

• Which pages/products/features are particularly attractive/unattractive for users of our InsightPortal?
• Which products are our (potential) customers most interested in?
• Which offerings should we provide to our (potential) customers?
• Which flows and processes cause confusion and must be improved?

To that end, we particularly process the following data:

• IP address;
• User ID;
• visited URLs (web pages);
• used products and features;
• actions taken within the InsightPortal (e.g. report download, report ordering);
• time spent from access to logout;
• data accessed and analysed;
• login via mobile or via web; and
• any additional personal information that you provide to us as part of your registration for the emnos portal.

You can opt-out of website analysis tracking by turning off the user tracking option in your settings page.

4.3. LEGAL BASIS

The legal basis for the processing of pseudonymous data described in Section 4 is Art. 6 Para. 1 f) DSGVO (balancing of interests – based on our interest in understanding the interests of our portal users.)

5. THIRD-PARTY CONTENT

5.1. GENERAL

The internet thrives on connections. For this reason, you will not only find our own content on our portal. We have also incorporated various third-party content that either improves the technical functionality or the attractiveness of our portal in terms of content. If you access one of our pages with such third-party content, your browser establishes a direct connection to the servers of the respective provider and retrieves their content in order to display it to you.

5.2. ESRI MAPS

Our InsightPortal shows maps of the map service ESRI Maps. The provider is Environmental Systems Research Institute, Inc., 380 New York Street, Redlands, California 92373-8100, USA (“ESRI”). When you visit one of our pages with ESRI Maps, your browser connects directly to ESRI’s servers and retrieves the maps to display them to you.

To use the functions of ESRI Maps, it is necessary to process your IP address and information about your potential use of the map. This information is transferred from your internet browser to an ESRI server in the U.S. and processed there by ESRI. ESRI has committed to comply with the EU-U.S. Privacy Shield Agreement published by the U.S. Department of Commerce on the collection, use, and storage of personal data from EU member states. Further information is available here: https://www.privacyshield.gov/participant?id=a2zt00000004EspAAE&status=Active

You can find more information on the handling of user data in ESRI’s data protection declaration: https://www.esri.com/en-us/privacy/privacy-statements/privacy-statement

5.3. LEGAL BASIS

The legal basis for the integration of third-party content described in Section 5 is Art. 6 Para. 1 f) DSGVO (balancing of interests – based on our interest in presenting attractive content to users of our portal in a technically-efficient manner).

6. USE OF ADDITIONAL SERVICE PROVIDERS

For the operation of our emnos InsightPortal, we commission further external service providers with data processing (e.g., data centers). These service providers also process personal data to the extent necessary. We carefully select and monitor these service providers. They process the data exclusively in accordance with our instructions and are also bound by this privacy policy.

7. COOKIE INFORMATION

7.1. GENERAL

A cookie is a small text file (often including a unique identifier), that is sent to a user’s browser from a website's computers and stored on a user’s computer's hard drive or on a tablet or mobile device (collectively, “Computer”). A cookie stores a small amount of data on your Computer about your visit to a website.

We place and access cookies on your Computer; these cookies are known as “first-party cookies”. Cookies may also be placed and accessed by some of our third-party service providers, which are known as “third-party Cookies” and are described below. Some Cookies are "session Cookies," which means that they are temporary Cookies that are only stored on your device while you are visiting our Site. Other Cookies are "persistent Cookies”, which means that they are stored on your Computer for a period of time after you leave our Site.

You may refuse or accept cookies at any time by activating settings on your browser. Most browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. You can also manually delete cookies within your browser settings. If you choose to decline or delete cookies, you may not be able to fully use all features of the emnos InsightPortal.

7.2. OVERVIEW OF COOKIES USED IN THE EMNOS INSIGHTPORTAL

8. STORAGE PERIOD

The data you enter as defined in Section 3.1 will be deleted no later than after the expiration of any retention periods under commercial and tax law, i.e. after 6 years. Automatically-recorded data as defined in Section 3.2 will be deleted or randomized no later than after 120 days. The data used for tracking purposes as defined in Section 4.1 and 4.2 will be deleted no later than after 6 months.

9. YOUR RIGHTS

Upon request, we will inform you whether and which data we have stored about you. As far as the legal requirements are met, you have the right to correct, block, or delete this data.

You also have the right to receive from us in a structured, current, and machine-readable format the personal data you have provided to us; you can transmit this data to other parties or have it transmitted.

You also have a right of appeal to the competent supervisory authority for data protection.

10. DATA PROTECTION OFFICER AND CONTACT

You can contact our data protection officer under the following address: emnos Data Protection Officer, Theresienhöhe 12, 80339 Munich,

For questions regarding data protection you can contact us under: privacy@emnos.com

As of September 2018