If you are residing in the European Union or are subject to the GDPR, the following policy is effective:
Any collection, processing and use (hereinafter "use") of data is solely for the purpose of providing our services. The services of InLoox GmbH have been designed to use as little personal information as possible. For that matter, "personal data" is understood as all individual details about a person or factual circumstances of an identifiable natural person (so-called "affected person").The following statements on data protection describe what types of data are collected when accessing our website, what happens with these data and how you may object to data usage.
Responsible within the meaning of the EU General Data Protection Regulation (GDPR) and the new Federal Data Protection Act (BDSG) is:
InLoox GmbH („InLoox“)
Address: Walter-Gropius-Strasse 17, 80807 Munich, Germany
Phone: +49 (0) 89 3589988-0
Email: info@inloox.com
Homepage: https://www.inloox.de
Data security officer:
Kemal Webersohn of WS Datenschutz GmbH
WS Datenschutz GmbH
Dircksenstraße 51
D-10178 Berlin
https://webersohnundscholtz.de/
Data privacy email address: inloox@ws-datenschutz.de
We have taken technical and organizational measures to ensure that the requirements of the EU General Data Protection Regulation (GDPR) are met by us, as well as, by external service providers working for us. If we work with other companies to provide our services, such as email and server providers, this will only be done after an extensive selection process. In this selection process, each individual service provider is carefully selected for its suitability in terms of technical and organizational data protection skills. This selection procedure will be documented in writing and an agreement on the order processing of data (order processing contract) will only be concluded if the third party complies with the requirements of Art. 28 GDPR. Your information will be stored on specially protected servers. Access to it is only possible for a few specially authorized persons. Our website is SSL/TLS encrypted, as can be seen by the https:// at the start of our URL. This also involves e-mail communications, which is encoded via SSL certificate.
We process personal data only if necessary. As soon as the purpose of the data processing is fulfilled, erasure of the data is carried out according to the standards of the erasure concept, unless legal or contractual regulations oppose this.
When visiting our website, our web servers temporarily store every access in a log file. The following data is collected and stored until automated erasure:
The legal basis for the temporary storage of the data and log files is Art. 6 para. 1 s. 1 lit. f) of the GDPR. Our legitimate interest is to make our website accessible for you.
The processing of this data serves: the purpose of enabling the use of the website (connection establishment), system security, the technical administration of the network infrastructure, as well as to optimize the website. The IP address is evaluated only in case of attacks on our network infrastructure or the network infrastructure of our internet provider. Furthermore, no input of your personal data is required to use our website.
As soon as the purpose of the data processing is fulfilled, erasure of the data is carried out. This happens as soon as you close our website. Our hosting service might use data for statistical purposes. Any personal data will be anonymized for this. Our hosting service will delete this data after a period of 90 days.
The data processing is necessary in order to present the website and to ensure the website’s operation. Therefore, objecting is impossible.
Our website uses cookies that are stored on your computer when you use your website. Cookies are small text files that are stored on your hard drive, assigned to the browser you use, and by which InLoox or the body that sets the cookie, certain information flows:
Cookies cannot run programs or transmit viruses to your computer. When visiting a website, a cookie banner refers to the privacy policy and asks for your consent to data processing for cookies that are not necessary for the operation of the website.
Note on data processing in the USA by Google and Microsoft:
By clicking on "Accept all", you consent pursuant to Art. 6 para. 1 p. 1 lit. a) in conjunction with. Art. 49 para. 1 p. 1 lit. a) GDPR that your data will be processed in the USA. According to the ECJ, the data protection standard in the USA is insufficient and there is a risk that your data will be processed by the US authorities for control and monitoring purposes, possibly also without any legal remedy. If you only consent to the setting of necessary cookies, the transfer will not take place. Any consent given can be revoked at any time.
The legal basis for data processing for cookies that solely serve the functionality of this website (necessary cookies) is Art. 6 para. 1 p.1 lit. f) GDPR.
The legal basis for the processing of data through cookies that do not solely serve the functionality of our website is your consent pursuant to Art. 6 (1) p. 1 lit. a) GDPR.
Our legitimate interest arises from the guarantee of a smooth connection setup and a comfortable use of our website as well as for reasons of evaluation of system security and stability. The data processing also takes place in order to enable a statistical evaluation of the website usage.
This website uses the following types of cookies. The extend and function of each are being explained below:
Transient cookies are automatically deleted when you close the browser. This is especially true for session cookies which store your session ID, with which various requests from your browser can be assigned to your session. This will allow your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.
Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie.
You have the option to revoke your consent to data processing by cookies, which do not solely serve the functionality of the website, at any time. In addition, we set cookies only after you have consented to the setting of cookies when accessing the site. In this way, you can prevent data processing via cookies on our website. You can also delete the cookies in the security settings of your browser at any time. We would like to point out that you may not be able to use all the features of this website. You can also prevent cookies from being set at any time by making the appropriate settings in your internet browser.
Via the website it is possible to contact us via e-mail or a contact form. This will require different data to answer the request, which will be automatically saved for processing. The following data will be collected at least (marked as required) within the contact form: the first name, the last name and the e-mail address. You can also voluntarily provide information on the phone number and the address (if requesting documents) and leave a comment / message text. We will only process your data in accordance with the contractual obligations of the concluded contract and send it to the following categories of external recipients:
The legal basis depends on Art. 6 para. 1 s. 1 lit. b) GDPR.
The processing of personal data from the input form is used solely handling the contact request.
Your data will be deleted by us immediately after 180 days, unless official, statutory or contractual retention periods are opposed to deletion.
The user has the right to withdraw their consent to the processing of personal data at any time. If the user contacts us, they can object to storage of their personal data at any time. In such cases, the conversation cannot be continued. All personal data that has been stored in the course of the contact will be deleted.
We use the services of NFON AG as an online telephone service provider. This allows us to control the phone from the computer using software installed on the computer. This allows us to better understand a caller's phone history. The service processes the IP address and your phone number. The data processing is carried out by:
NFON AG, Machtlfinger Str. 7, 81379 Munich, Germany.
For additional information on data protection at NFON: https://www.nfon.com/de/rechtliches/datenschutzerklaerung
The legal basis for data processing is Art. 6 para. 1 s. 1 lit. b) GDPR.
The purpose of data processing is to carry out the telephone calls and the billing of the services by NFON. Our interest in using it is to be able to incorporate guided calls into our internal system more quickly and to improve telephone communication within the company.
The data will be deleted as soon as the purpose of the data processing has been achieved and no legal, contractual or official regulations prevent deletion. The connection data will be deleted six months after NFON has invoicing.
For questions about NFON’s data protection or to exercise your rights, you can contact our Data Protection Officer at the address above or contact NFON at the following e-mail address: datenschutz@nfon.com.
For your support requests, we use the Freshdesk Customer Support software provided by Freshworks Inc., 1250 Bayhill Drive, Suite 315, San Bruno, CA 94066, USA.
Freshworks assures that it has taken appropriate technical and organizational measures to protect the data. Contractually regulated is the use of a data center in Frankfurt am Main, Germany and a data protection compliant data processing agreement: https://www.freshworks.com/privacy/
The legal bases of the processing of data are Art. 6 (1) sentence 1 lit. b) and lit. f) GDPR and takes place for the purpose of examining and answering inquiries, in particular also for the implementation of pre-contractual measures. For this purpose, results our legitimate interest as well as from the need for direct customer communication.
We only process your data to process your contact request.
You have the option to object to data processing at any time. To do so, please contact our data protection officer.
We use the "Pipedrive" service as our customer relationship management tool ("CRM Tool") to systematically design our customer relationship processes. The data processing is carried out by: Pipedrive OÜ, Mustamäe tee 3a,10615 Tallinn, Estonia/Pipedrive, Inc. 460 Park Avenue, Suite 500, New York NY 10016 USA.
Within the scope of use, the service provider processes the following data:
A commissioned data processing contract has been concluded with Pipedrive. This complies with the legal requirements of Art. 28 (3) DSGVO. Further information on the data protection of the service provider can be found here: https://www.pipedrive.com/en/privacy
The data processing is based on our legitimate interest in a fast and effective processing of customer inquiries and organizing our customer relationship management according to Art. 6 para. 1 p. 1 lit. f) DSGVO.
The purpose of data processing is the organization of our customer relationship processes and the associated processing of customer inquiries.
The data is stored until the purpose of the data processing has been achieved and no legal, contractual or official retention obligations prevent deletion.
You can contact us at any time and object to further processing of your data. In this case, we can unfortunately not continue the communication with you. All personal data processed by us in the course of contacting you will be deleted in this case. You also have the option of contacting Pipedrive's data protection officer at dpo@pipedrive.com in this regard.
You can register on our website. For this it is necessary that the data subject enters personal data in the registration mask. The following data is collected at least: your last name, the username and the e-mail address. In addition, the first name can be optionally specified. We will only process your data in accordance with the contractual obligations of the concluded contract and send it to the following categories of external recipients:
If the data subject enters mandatory personal data in the registration form, the legal basis of the data processing is based on Art. 6 para. 1 s. 1 lit. b) GDPR. However, if the user also enters personal data in the optional input field, the data processing is based on Art. 6 para. 1 s. 1 lit. a) GDPR.
The processing of personal data is used solely for us to finish your registration and organize your website-account.
Duration of storage
The data are deleted as soon as the purpose of storage is no longer required. This is the case if you delete your account and no statutory or regulatory retention periods of erasure contradict.
During and after the registration, the data subject is free to change, correct or delete their personal data.
Via our website it is possible to apply via e-mail (bewerbung@inloox.com). For this purpose, personal data are processed and stored for further processing for the respective application process.
Data processing will be based on Art. 88 GDPR and § 26 BDSG (2018).
We process your data exclusively for the purpose of carrying out the application process.
In case of successful application and employment, the personal data is stored in accordance with the legal requirements. In case of unsuccessful application, the data will be deleted in accordance with the rules of the local erasure concept. In doing so the provisions of the AGG (German Employment Law), especially the existing evidence pursuant to § 22 AGG, are considered.
This does not apply if we are obliged to any legal erasure periods or if you have given consent to store your data for further communication with us (e.g. we have another suitable job in the future). If you have given consent the legal basis for further storage of your data is Art. 6 para. 1 s. 1 lit. c) or lit. a) GDPR.
You can contact us at any time and object to further processing of your data. All personal data of the application process will be deleted in this case.
On our website visitors can subscribe to our newsletter. When signing-up to receive a newsletter, we ask for your email address. This data is necessary to send the newsletter to its recipients. The newsletter will be sent via email after the sign-up process on our website is completed. In order to meet the requirements of the GDPR, we use DOI (Double Opt.-In). If you sign up for our newsletter, we will send a confirmation email to the address you provided us with. This email contains a confirmation link that you must click to complete the sign-up process. Following this procedure, the IP address, date and time of login are stored. This is done to prevent abuses. We won’t transfer the data to third parties.
This processing is legally based on Art. 6 para. 1 s.1 lit. a) GDPR, thus your consent. Existing customers may also receive our newsletter without having given their explicit consent. This is carried out only within the strict boundaries of § 7 para.3 UWG (German Act against unfair Competition) and in accordance to Art. 95 GDPR. This equals the legal basis of Art. 6 para. 1 s.1 lit. f) GDPR. Our legitimate interests are to provide information about our products through promotional e-mails to our existing customers and thereby keep in contact with these customers.
The newsletter has the functions of informing the affected parties about offers and news at a regular basis.
We process personal data only as long as necessary. As soon as the purpose of the data processing is fulfilled, erasure of the data is carried out according to the standards of the erasure concept, unless legal or contractual regulations oppose this.
The consent to receiving the newsletter can be revoked by you at any time. For this purpose, you can click the integrated link in each newsletter to unsubscribe. It is also possible to inform us about the revocation of the consent in any other way, e.g. via mail or email.
The newsletter is sent using "Mailchimp", an online marketing platform. The data processing is carried out by: The Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
Note on data processing in the USA:
By subscribing to the newsletter, you consent pursuant to Art. 6 para. 1 p. 1 lit. a) GDRP that your data is processed by our newsletter service provider in the USA. According to the ECJ, the data protection standard in the USA is insufficient and there is a risk that your data will be processed by the US authorities for control and monitoring purposes, possibly also without any legal remedy. Any consent given can be revoked at any time.
The email addresses of our newsletter recipients, as well as their other data described in the context of this notice, are stored on Mailchimp's servers in the USA. Mailchimp uses this information to send and evaluate the newsletters on our behalf. Furthermore, according to its own information, Mailchimp may use this data to optimize or improve its own services, e.g. to technically optimize the dispatch and display of the newsletters or for economic purposes to determine from which countries the recipients come. However, Mailchimp does not use the data of our newsletter recipients to address them itself or to pass them on to third parties. The newsletters contain a so-called "web beacon", i.e. a pixel-sized file that is retrieved from Mailchimp's server when the newsletter is opened. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval are collected. The statistical surveys also include the determination of whether the newsletters are opened, how often they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our nor Mailchimp's intention to observe individual users. We trust in the reliability and IT and data security of Mailchimp. Furthermore, we have concluded a "Data Processing Agreement" with Mailchimp. This is a contract in which Mailchimp undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties. You can view Mailchimp's privacy policy at https://Mailchimp.com/legal/privacy/.
The data processing by Mailchimp is based on your consent pursuant to Art. 6 para. 1 p. 1 lit. a) GDPR.
We use Mailchimp as our sub- processor to ensure an efficient management of our mailing list and to send newsletters to stay in touch with you.
Mailchimp claims to keep your personal data only as long as we use it for sending newsletters. When we delete you from our mailing list, Mailchimp will delete this data as well.
You can object to the processing of your data by Mailchimp. We will take your objection into consideration and will notify you if and why we continue the processing. You are also free to use the „opt out“-link in the footer of each e-mail. If you do so, we will delete your e-mail address from our mailing list which in turn will prompt Mailchimp to stop processing your personal data. This will not have any effect on other mailing lists (e.g. by other companies) managed through Mailchimp.
InLoox runs a blog to inform our users about interesting news.
This data processing is legally based on our legitimate interest Art. 6 para. 1 s.1 lit. f) GDPR) in enabling our users to participate in an active and fair community.
The collection of data is intended to ensure the stability and usability of this website and the blog. Also, it is necessary to prevent misuse.
We process personal data only as long as necessary. As soon as the purpose of the data processing is fulfilled, erasure of the data is carried out according to the standards of the erasure concept, unless legal or contractual regulations oppose this.
As far as our data processing is based on our legitimate interest, you have the possibility of objecting to data processing (see Art. 21 GDPR and “Your rights”). In the event of a disagreement, we please provide us with the reasons why we should not process your personal data as we have done. We will then examine the situation and either discontinue or adjust the data processing or will tell you based on which reasons we have to continue this processing.
When you order from InLoox, we will process the name, address, telephone number and e-mail address of you.
The legal basis for this data processing is Art. 6 para. 1 s.1 lit. b) GDPR. We are processing your data for the fulfilment of purchase contracts and supply agreements.
We process your data in order to conclude the purchase contract with you and to process the invoice by e-mail or post and payment receipt and to inform you of any changes. We pass your data on to our service providers, so that they can process the purchase and communicate with you if necessary.
Your data will only be stored as long as this is necessary for the fulfilment of the purpose and as long as we are obliged by law to store your data.
The data processing is necessary in order to be able to process your purchase contract, which is why it cannot be waived. There is therefore no option to object.
If you want to pay for your order via our online shop with your credit card, we need the following data to process the payment: name, address, e-mail address, credit card number, name of the credit card holder, period of validity of the credit card. Our service manager Braintree check the entered data together with the data of your order.
Braintree is a PayPal company: PayPal (Europe) S.à r.l. et Cie, S.C.A .; 22-24 Boulevard Royal; L-2449 Luxembourg.
And handles credit card payments. Your personal data will be passed on to Braintree solely for the purpose of processing the online order.
Braintree's privacy policy can be found at: https://www.braintreepayments.com/legal/braintree-privacy-policy
The legal basis for the data processing is Art. 6 para. 1 s. 1 lit. b) GDPR. The processing of your data is required for payment by credit card.
The transmission of the data is necessary to prevent any possible misuse and use the data after successful verification to process the agreed payment by credit card.
We process personal data only as long as necessary. As soon as the purpose of the data processing is fulfilled, erasure of the data is carried out according to the standards of the erasure concept, unless legal or contractual regulations oppose this.
Data processing is mandatory in order to process your payment, so it cannot be waived if you have chosen this payment method. Therefore, objecting is impossible.
If you opt for the direct debit procedure, the name of the account holder, the IBAN, the order number, the invoice amount will be processed. InLoox does not process the payment data itself, but these are processed directly by the service provider who processes the payment. The service provider cannot assign this information to other information (such as your address or e-mail address). Please note the privacy policy of the service provider: https://www.sskm.de/de/home/toolbar/datenschutz.html?n=true&stref=footer
The legal basis for data processing is Art. 6 para. 1 s. 1 lit. b) GDPR.
The processing of the data is required for payment by direct debit and thus for the execution of the contract.
We process personal data only as long as necessary. As soon as the purpose of the data processing is fulfilled, erasure of the data is carried out according to the standards of the erasure concept, unless legal or contractual regulations oppose this.
Data processing is mandatory in order to process your payment by direct debit, which is why you cannot waive it if you have chosen this payment method. There is therefore no option to object.
We offer PayPal as a possible payment service. PayPal is a virtual account model and means of payment. To use the payment service, you must first register with PayPal. If you use PayPal as a means of payment, the following personal data will be transmitted to PayPal: first name, surname, address, e-mail address, IP address, telephone number, possibly mobile number and other data required for the final payment transaction , In addition to the transfer of data to credit bureaus, it is also possible that PayPal may transfer the personal data to affiliated companies, including subcontractors or order data processors, as far as this is necessary to fulfill the contractual obligations. For the privacy policy of PayPal, please refer to the following link: https://www.paypal.com/en/webapps/mpp/ua/privacy-full
The data processing is carried out by: PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
The legal basis for the data processing is Art. 6 para. 1 s. 1 lit. b) GDPR.
The transmission of the data is necessary to prevent any possible misuse. We inform you that PayPal may transfer your personal information to credit bureaus. This is because PayPal reserves its right to verify the identity and creditworthiness of the user.
We process personal data only as long as necessary. As soon as the purpose of the data processing is fulfilled, erasure of the data is carried out according to the standards of the erasure concept, unless legal or contractual regulations oppose this.
Data processing is mandatory in order to process your payment through PayPal, so it cannot be waived if you have chosen this payment method. Therefore, objecting is impossible or would lead to withdrawal from the contract.
We have integrated the social media platforms Facebook, Instagram, LinkedIn, Pinterest, Twitter, Xing and YouTube on our app via links that may result in the social media providers receiving data from you. If you click on the social media link, the website of the respective social media provider is opened. By opening the web pages of the respective social media provider via our website, the respective reference data is transmitted by us to the respective social media provider. The social media provider thereby receives the information that you have visited us.
Note on data processing in the USA:
If you click on a social media link, data about you may be processed by the respective provider in the USA. According to the ECJ, the data protection standard in the USA is inadequate and there is a risk that your data will be processed by the US authorities for control and monitoring purposes, possibly also without any legal remedy. Unless you click on the links of the social media providers, no data transfer takes place.
Further information on data processing by the social media providers can be found here:
YouTube Video: When you visit some pages of our website with embedded videos, your IP address will be sent to YouTube and cookies will be installed on your computer. We incorporated your YouTube videos with the enhanced privacy mode. In this case, YouTube still contacts the Google Ad Manager service - formerly Double Click - from Google, but according to Google's privacy policy, personal information is not evaluated. As a result, YouTube does not store any information about the visitors unless they watch the video. If you click on the video, your IP address will be sent to YouTube and YouTube will know that you have watched the video. If you are logged in to YouTube, this information will also be assigned to your user account. InLoox has no knowledge or influence about any collection and use of your data by YouTube. For more information, see the YouTube / Google data policy: https://www.google.com/intl/en/policies/privacy/
The data processing is performed by: YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Data processing for the European Economic Area and for Switzerland is carried out by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Flowplayer: The service makes it possible to upload, manage and publish videos on your own website or on third-party websites. In order to use certain functions of the website, you may be required to provide personal information: name, mailing address, telephone number, e-mail address, computer type, screen resolution, operating system version, browser type, IP address. For more information, please refer to FlowPlayer's Privacy Policy: https://flowplayer.com/privacy-policy
The data processing is performed by: Flowplayer AB, Mäster Samuelsgatan 36 111 57, Stockholm, Sweden.
The legal basis for the data processing is your consent pursuant to Art. 6 para. 1 p.1 lit. a) GDPR.
The purpose of the data processing is to make our website as appealing as possible in order to give you a positive user experience, including the possibility to provide you with videos.
YouTube Video: Data collected by YouTube (Google) through plug-ins and advertisements will be deleted after 9 or 18 months of storage.
Flowplayer: The data are deleted if the purpose of the data processing is fulfilled and no legal, contractual or official retention periods preclude a deletion.
You have the option to revoke your consent at any time. Please contact our data protection officer to do so.
YouTube Video: You have the option to log out of YouTube before accessing our website and to delete all cookies from your browsing history. Other settings and disagreements on the use of data for promotional purposes are possible within the YouTube profile settings.
The settings are platform independent, i. they are adopted for all devices, such as desktop computers or mobile devices.
Flowplayer: The setting of cookies can be prevented at any time by appropriate settings in your Internet browser. The already set cookies can also be deleted in the settings of the Internet browser. We express our concern that the inability to set cookies may result in not all features being unrestrictedly available. If you no longer wish to receive marketing-related emails from Flowplayer, you can unsubscribe by following unsubscribing instructions in the latest message you have received, or by contacting legal@flowplayer.com.
We have rented Microsoft Azure data centers that meet certifications, including ISO 27001, for the provision of this site. They are located in the EU and in the US. Insofar as personal data is transferred outside the European Union, there is a recognition of the same level of protection.
The data processing is performed by: Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA and Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
The legal basis for data processing is Art 6 (1) f) GDPR. Our legitimate interest in data processing is to ensure the operation and security of the website, to study the way visitors use the website, and to facilitate the use of the website.
The purpose of data processing is to enable connection, system security, technical administration of the network infrastructure and optimization of the Internet offer.
The data will be deleted if the purpose has been fulfilled and no contractual, official or legal regulations oppose it.
The collection and storage of data for the provision of the website in log files is essential for the operation of the website. There is consequently no contradiction on the part of the user.
We use SendGrid as a mail service provider. It can include your IP address, browser type, log files, other information about your system and connection, email deliverability metrics, and additional data if you're a SendGrid customer. SendGrid acts as a data processor and only processes such information on our behalf in accordance with our instructions. SendGrid data processing is necessary to provide us with the service, to remedy service and technical issues, and to respond to any support requests or instructions you may have. Please note that SendGrid uses web beacons to send emails to recipients via the SendGrid platform. These web beacons track how you have handled the emails sent through the SendGrid platform. This allows SendGrid to measure the performance of their customers' email campaigns, provide analytical information, and improve service effectiveness. For more information on privacy, see their privacy policy: https://sendgrid.com/policies/privacy/services-privacy-policy/ and the Terms of Use: https://sendgrid.com/policies/tos/
Data processing is performed by: SendGrid Inc. 1801 California St., Suite 500, Denver, Colorado 80202, USA.
The legal basis is Art. 6 para. 1 p.1 lit. b) GDPR.
We use SendGrid to provide you with a low-threshold communication path. SendGrid processes data to provide services, to improve the content and functionality of the services and to facilitate the analysis of the services.
SendGrid retains your personal information for the period for which our contract with SendGrid exists. Subsequently, the data will be deleted at our request or returned to us.
The contact via SendGrip can be stopped at any time and the data processing be contradicted. You may also opt out of the marketing emails by clicking the "unsubscribe" link at the bottom of the marketing communications or by emailing datasubjectrequests@sendgrid.com.
We use the services of Nolt as a feedback system. The following data can be transmitted to Nolt and further processed: which Nolt pages you have accessed, the device and browser type, information that you send to Nolt (eg: email address), your IP address. For more information on data protection at Nolt, please refer to its privacy statement: https://nolt.io/legal#privacy
The data processing is carried out by: Rebase GmbH, Vogelherdstrasse 7b, 9016 St. Gallen, Switzerland.
The legal basis is based on Art. 6 para. 1 sentence 1 lit. f) DSGVO with our legitimate interest in having our services evaluated in order to draw conclusions from them and thus constantly improve our services.
The feedbacks allow us to draw conclusions about our offer and our services.
The data will be deleted as soon as the purpose of the data processing is fulfilled and no legal, official or contractual regulations preclude a deletion.
You can exercise your rights by sending an e-mail request to hello@nolt.io. Your inquiries will be processed within 30 days.
In surveys we use the crowd signal service. If a user participates in a survey, Crowdsignal receives information about participation: IP address, browser used, operating system, time and date. More information: https://automattic.com/privacy
The data processing is performed by: Aut O'Mattic A8C Ireland Ltd., Business Center, No.1 Lower Mayor Street, International Financial Services Center, Dublin 1, Ireland. For some of the processing activities provided by the Aut O'Mattic A8C Ireland Ltd. Services provided is also Automattic Inc., 60 29th Street # 343, San Francisco, CA 94110, USA.
Note on data processing in the USA:
If you participate in the survey via Crowdsignal, data from you may be processed by Crowdsignal in the USA. According to the ECJ, the data protection standard in the USA is insufficient and there is a risk that your data will be processed by the US authorities for control and monitoring purposes, possibly also without any legal remedy. If you do not participate in the surveys via Crowdsignal, there will be no data transfer.
The legal basis is based on Art. 6 para. 1 sentence 1 lit. f) GDPR. It is our legitimate interest to have our performance evaluated in order to draw conclusions from it and thus constantly improve our offer.
Our interest lies in having our services evaluated and thus constantly improving our services.
The data will be deleted as soon as they are no longer necessary for the purpose and no legal, official or contractual regulations oppose this.
The data will only be processed if you take the opportunity to participate in the survey. You can exercise your rights at any time.
We are represented on social media via our own profiles. Based on the ruling of the European Court of Justice of 05.06.2018 (available at http://curia.europa.eu/juris/document/document.jsf?text=&docid=202543&pageIndex=0&doclang=DE&mode=req&dir=&occ=first&part=1&cid=298398 ), operators of presences in social media and the operators of the social networks themselves are considered to be jointly responsible for data processing. We would like to point out that you use our presences on social media and their features at your own responsibility. This applies in particular to the use of the interactive features (e.g. commenting, sharing, rating). Alternatively, you can also access the information we make available on social media on our own website at https://www.inloox.com.
| Facebook: | https://www.facebook.com/InLoox Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA or Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland. Further information: https://de-de.facebook.com/help/pages/insights, https://de-de.facebook.com/about/privacy, https://de-de.facebook.com/full_data_use_policy |
| Instagram: | https://www.instagram.com/inlooxgmbh/?hl=de Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA. Responsible for data: Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland. Further information: https://help.instagram.com/155833707900388, https://www.instagram.com/about/legal/privacy/ |
| You can reach the data protection officer of Facebook and Instagram via the following linked contact form: https://www.facebook.com/help/contact/540977946302970 | |
| LinkedIn: | https://www.linkedin.com/company/1324329/ LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland or LinkedIn Corporation, 1000 W. Maude Ave., Sunnyvale, California 94085, USA. Further information: https://www.linkedin.com/legal/privacy-policy You can reach the data protection officer of LinkedIn via the following linked contact form: https://www.linkedin.com/help/linkedin/ask/TSO-DPO |
| Twitter: | https://twitter.com/inloox_gmbh Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Further information: https://twitter.com/de/privacy You can reach the data protection officer of Twitter via the following linked contact form: https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp |
| Xing: | https://www.xing.com/companies/inlooxgmbh XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. Further information: https://www.xing.com/privacy, https://www.xing.com/app/share?op=data_protection You can reach the data protection officer of Twitter via the following email address: Datenschutzbeauftragter@xing.com |
| YouTube: | https://www.youtube.com/c/InlooxDe YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. Data processing for the European Economic Area and for Switzerland is carried out by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information: https://www.google.de/intl/de/policies/privacy/ You can reach Google's data protection officer, who is also responsible for YouTube, via the following linked contact form: https://support.google.com/policies/troubleshooter/7575787?hl=de |
Data processed by social networks
When you visit our social media sites, the operators of the social networks collect, among other things, your IP address and other information that is stored on your PC in the form of cookies. This information is used to provide us, as the operator of the presence, with statistical information about the use of the site. The data collected about you in this context will be processed by the operators of the social networks and, if necessary, transferred to countries outside the European Union. What information the operator of the respective social network receives and how it is used is described in the privacy statements of the respective social networks. There you will also find information on the contact options.
In what way the operators of the social networks use data from the visit of our presence in the social networks for their own purposes, to what extent activities on the presences in social networks are assigned to individual users, how long the operators store this data and whether data from a visit to the presences in social networks are passed on to third parties, is not conclusively and clearly stated by the operators of the social networks and is not known to us.
When accessing our presences in social media, the IP address assigned to your end device is transmitted to the operator of the respective social network. The social networks also store information about the end devices of the users (e.g. as part of the "login notification" function); if necessary, the operators of the social networks are thus able to assign IP addresses to individual users.
If you are currently logged in to the respective social network as a user, a cookie with your individual identification in this social network is located on your end device. This allows the operator of the social network to track that you have visited a certain page and how you have used it. Based on this data, content or advertising can be tailored to your previous website visits.
If you want to avoid this, you should log out of the respective social network or deactivate the "stay logged in" function, delete the cookies present on your device, and exit and restart your browser. In this way, login information via which you can be directly identified will be deleted. This allows you to use our social media presences without revealing your user ID. When you access interactive features of the site (like, comment, share, news, etc.), a login screen will appear. After any login, you will again be recognizable as a specific user of the social network used.
Information on how you can manage or delete existing information within the social network can be found on the above-mentioned support pages of the respective social network.
Data processed by InLoox
The data you enter on social networks, in particular your username and the content published under your account, are processed by us insofar as we respond to your messages, if applicable. In addition, your published posts, ratings and comments refer to your account on the respective social network. If you mention us via an @ or a # or similar, this mention will be published under your username on our site, if applicable. The data freely published and disseminated by you on the respective social network may thus be included by us in our offer and made accessible to other users of the respective social network. If you mark our appearance in the social media with "Like" or "Follow" or a similar interaction, this will be communicated to us by the respective social network with your user name and link to your account. We as the provider of the information service do not collect and process any further data from your use of our appearances in the social media beyond this.
The data processing from our side is based on Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interest results from the advertising function of social media. We use these to increase awareness of our company.
The data you provide in this context and which may be accessible to us (e.g. user name, images, interests, contact data) are processed by us exclusively for the purpose of customer and prospect communication. Our legitimate interest is to provide you with a platform on which we can display up-to-date information and with the help of which you can address your request to us and we can respond to your request as quickly as possible.
As far as we are able, your data will be deleted when our presence on social media is discontinued.
In order to be able to provide our services, we use the support of service providers from the European area as well as from third countries. In order to ensure the protection of your personal data even in the event of data transfer to a third country, we conclude special order processing agreements with each of the carefully selected service providers. All of the service providers we use have sufficient evidence that they ensure data security through appropriate technical and organizational measures. Our service providers from third countries are either located in countries that have an adequate level of data protection recognized by the EU Commission (Art. 45 GDPR) or have provided appropriate safeguards (Art. 46 GDPR).
Adequate level of protection: The provider originates from a country whose adequate level of data protection has been recognized by the EU Commission. You can find more information at: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en
EU standard contractual clauses: Our provider has submitted to the EU standard contractual clauses to ensure secure data transfer. You can find more information on this at: https://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:DE:PDF
Binding Corporate Rules: Article 47 of the GDPR provides for the possibility of ensuring data protection when transferring data to a third country via binding internal data protection rules. These are reviewed and approved by the competent supervisory authorities as part of the consistency procedure under Art. 63 GDPR.
Consent: In addition, a data transfer to a third country without an adequate level of protection only takes place if you have given us your consent for this in accordance with Art. 49 (1) a) GDPR or if another exception in accordance with Art. 49 GDPR is relevant for the data transfer.
You have the following rights with respect to the personal data concerning you:
If you have given your consent to the processing of your data, you can withdraw it at any time. This will affect the admissibility of processing your personal data by us for the time after you have withdrawn your consent. To withdraw your consent, contact us personally or in written form.
You have the right to obtain from us confirmation as to whether personal data concerning you are being processed, and, where that is the case, access to your personal data and the following information:
In the case of such a request, you must provide enough information about your identity to proof that the request concerns your own personal data.
You have the right to obtain from us without undue delay the rectification and completion of inaccurate personal data concerning yourself.
You may also request the erasure of your personal data if any of the following applies to you:
Where we made the personal data public and are obliged to erase the personal data pursuant to Art. 17 para. 1 GDPR, we, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
These rights shall not apply to the extent that processing is necessary:
You shall have the right to obtain from us restriction of processing where one of the following applies:
Where processing has been restricted under the aforementioned conditions, such personal data shall, except for storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the limitation of the processing is restricted, you will be informed by us before the restriction is lifted.
If you have asserted us your right to rectification, erasure or restriction of data processing, we will inform all recipients of your personal data to correct, delete or restrict the processing of data, unless this proves impossible or involves disproportionate effort.
You also have the right to know which recipients have received your personal data.
You have the right to receive your personal data, which you provided to us, in a structured, commonly used and machine-readable format. Also, you have the right to transmit those data to another controller, where
In exercising your right to data portability, you have the right to obtain that personal data transmitted directly from us to another controller, as far as technically feasible. The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority that has been delegated to us.
Where we based the processing of your personal data on a legitimate interest (Art. 6 para. 1 s. 1 lit. f) GDPR), you may object to the processing. The same applies if the data processing is based on Art. 6 para. 1 s. 1 lit. e).
In this case, we ask you to explain the reasons why we should not process your personal data. Based on this we will terminate or adapt the data processing or show you our legitimate reasons why we continue the data processing.
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against the infringes of the GDPR.
The supervisory authority to which the complaint has been submitted shall inform you of the status and results of the complaint, including the possibility of a judicial remedy according to Article 78 GDPR.
To exercise these rights, please contact our data security officer:
Kemal Webersohn from Webersohn & Scholtz GmbH
By email: inloox@ws-datenschutz.de
or by mail:
WS Datenschutz GmbH
Dircksenstraße 51
D-10178 Berlin
We reserve the right to change this privacy policy in compliance with legal requirements.
Date: July 2023
If you are not residing in the European Union and are not subject to the GDPR, the following policy is effective.
The protection of personal data is the highest priority for InLoox, Inc. (hereafter “InLoox”).
When ordering or registering on our site, as appropriate, you may be asked to enter information like, including, but not limited to, your name, e-mail address, mailing address, phone number or credit card information.
We collect information from you when you register on our site, place an order, subscribe to our newsletter or fill out a form. When you register yourself in our personalized databases, you will be asked to furnish personal information. All data concerning your identity is stored on the server of InLoox and its business partners, but only when you expressly place this information at our disposal. This is done with your knowledge and only with your express permission.
You may, however, visit our site anonymously, without providing your personal information.
Like most websites, we use cookies and/or web beacons to enhance your experience, gather general visitor information, and track visits to our website. Data displayed in the opening of a page is not personal. We receive only technical data with the opening our webpages which is used exclusively for the generation of anonymous statistics to assist us in optimizing our products and services.
Please refer to ‘do we use cookies?’ section below for information about cookies and how we use them.
If you are using our products, we will gather anonymized usage statistics and error reports as part of the “Customer Experience Improvement Program” (CEIP). You can turn off this feature at any time. To learn more, go to www.inloox.com/ceip.
Any of the information we collect from you may be used in one of the following ways:
We implement a variety of security measures to maintain the safety of our personal information when you place an order or access your personal information.
We offer the use of a secure server. All supplied sensitive/credit information is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our Payment gateway providers database only to be accessible by those authorized with special access rights to such systems, and are required to keep the information confidential.
After a transaction, your private information (credit cards, financials, etc.) will not be kept on file for more than 60 days, except when your private information is collected by or through a third party such as a merchant, promotion website or an InLoox partner website for the purpose of processing your transaction. In these circumstances, the collection and use of your private information will also be governed by the privacy policy of the third party.
Yes. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your Web Browser (if you allow) that enables the sites or service providers system to recognize your browser and capture and remember certain information.
We use cookies to help us remember and process the items in your shopping cart, understand and save your preferences for future visits, keep track of advertisements and compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future. We may contract with third-party service providers to assist us in better understanding our site visitors. These service providers are not permitted to use the information collected on our behalf except to help us conduct and improve our business.
If you prefer, you can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies via our browser settings. Like most websites, if you turn your cookies off, some of our services may not function properly. However, you can still place orders over the telephone or by contacting customer service.
We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. This does not include trusted third parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. These parties have a data security and confidentiality agreement with InLoox. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others rights, property, or safety. However, personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
If you are an InLoox now! customer, you may, if you wish, nominate a distribution partner for your customer account. If you decide to do so, your customer information will be transmitted to the distribution partner. This information will include your company name, the products you have ordered, the initial purchase date and the term of the agreement with InLoox. We take particular care to ensure that only information, which is essential for the specific purposes of accounting and support, is transmitted to your distribution partner.
Occasionally, at our discretion, we may include or offer third party products or services on our website. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site, and welcome any feedback about these sites.
Because we value your privacy we have taken the necessary precautions to be in compliance with the California Online Privacy Protection Act. We therefore will not distribute your personal information to third parties without your consent.
We are in compliance with the requirements of COPPA (Children’s Online Privacy Protection Act). We do not collect any information from anyone under 13 years of age. Our website, products and services are all directed to people who are at least 13 years old or older.
This online privacy policy applies only to information collected through our website and not to information collected offline.
By using our site, you consent to our web site privacy policy.
If we decide to change or update our privacy policy, we will post changes on this page and/or update the Privacy Policy modification date below.
We will delete you data immediately on request. Please go to www.inloox.com/company/contact to contact us any time if you have any questions, suggestions or comments about this privacy policy.
Date: 30-05-2023