Privacy Policy Allocatus Cloud (SaaS)

Thank you for visiting our website and your interest in our company.

The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us.

The purpose of this privacy statement is to inform you about the processing of your personal data that we collect from you when you use Allocatus Cloud. Our data protection practice is in line with the legal provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). The following data protection declaration serves to fulfill the information obligations resulting from the DSGVO. These can be found, for example, in Art. 13 and Art. 14 et seq. GDPR.

Responsible

The person responsible within the meaning of Art. 4 No. 7 GDPR is the person who alone or jointly with others decides on the purposes and means of processing personal data.

With regard to our website, the person responsible is:

Holert GmbH
Luise-Ullrich-Strasse 20
80636 München
E-Mail: info@holert.com
Tel.: +49 89 599974700
Fax: +49 89 599974701 

 

Contact details of the data protection officer

We have appointed a data protection officer in accordance with Art. 37 GDPR. You can reach our data protection officer using the following contact details:

Dr. Jochen Notholt (Rechtsanwalt)
Lindwurmstrasse 10
80337 München
E-Mail: inbox@comp-lex.de

 

Provision of the website and creation of log files

Every time our website is called up, our system automatically collects data and information from the device that is called up (e.g. computer, mobile phone, tablet, etc.).

What personal data is collected and to what extent is it processed?

(1)Information about the browser type and version used;
(2) The operating system of the retrieval device;
(3) Host name of the accessing computer
(4) The IP address of the retrieval device;
(5) Date and Time of Access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user's system reached our website (referrer tracking);
(8) Message whether the retrieval was successful;
(9) Amount of data transferred

This data is stored in the log files of our system. This data is not stored together with the personal data of a specific user, so that individual site visitors are not identified.

Legal basis for processing personal data

Article 6 paragraph 1 lit. f GDPR (legitimate interest). Our legitimate interest is to ensure the achievement of the purpose described below.

Purpose of Data processing

The temporary (automated) storage of the data is necessary for the course of a website visit in order to enable delivery of the website. Personal data is also stored and processed to maintain the compatibility of our website for as many visitors as possible and to combat abuse and eliminate faults. For this it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, we use the data to optimize the website and to generally ensure the security of our information technology systems.

Duration of Storage

The aforementioned technical data will be deleted as soon as they are no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.

Possibility of objection and deletion

You can object to the processing at any time in accordance with Article 21 GDPR and request the deletion of data in accordance with Article 17 GDPR. You can find out which rights you are entitled to and how to assert them at the bottom of this data protection declaration.

 

Special functions of the website

Our site offers you various functions which we use to collect, process and store personal data. Below we explain what happens to this data:

Forum

What personal data is collected and to what extent is it processed?

We will process the data you enter in our forum, such as comments, description, username, etc., to fulfill the purpose stated below.

Legal basis for processing personal data

Article 6 paragraph 1 lit. a GDPR (consent through clear affirmative action or behavior)

Purpose of Data Processing

We will only store and process the personal data collected via our forum software for the operation of our forum, i.e. the provision of contributions (forum posts) and the provision of the stored user profiles. We will also make your forum entries and replies publicly available in our forum for third parties. If you can send private messages via our forum, we will forward them to the appropriately selected user via our system and make them readable. If you have set up an automatic e-mail reminder for threads, forum entries or private messages, we will send you an e-mail about the respective event. You can change or turn off this reminder in the forum settings.

Duration of Storage

Your forum posts will be saved and published indefinitely. We reserve the right to delete without giving reasons and without prior or subsequent information.

Possibility of objection and deletion

If you are logged in, you can delete your own forum entries yourself. If this does not work, you can have them deleted by us at any time. Please contact us in this regard. You can object to the processing at any time in accordance with Article 21 GDPR and request the deletion of data in accordance with Article 17 GDPR. You can find out which rights you are entitled to and how to assert them at the bottom of this data protection declaration.

Requirement to provide personal data

Creating a forum entry and sending private messages is voluntary. You are not obliged to use our forum. If you want to post a forum post, you must fill in the fields marked as required. If you do not enter the necessary information, your forum entry cannot be published.

Contact Form(s)

What personal data is collected and to what extent is it processed?

The data you entered in our contact forms, which you entered in the input mask of the contact form.

Legal basis for processing personal data

Article 6 paragraph 1 lit. a GDPR (consent through clear affirmative action or behavior)

Purpose of Data Processing

We will only use the data recorded via our contact form or via our contact forms to process the specific contact request that is received via the contact form. Please note that we may also be able to send you e-mails to the address provided in order to fulfill your contact request. The purpose of this is that you can receive confirmation from us that your request has been forwarded to us correctly. However, sending this confirmation e-mail is not obligatory for us and is for your information only.

Duration of Storage

After your request has been processed, the data collected will be deleted immediately, provided there are no statutory retention periods.

Possibility of revocation and deletion

The revocation and deletion options are based on the general regulations on the data protection right of revocation and right of deletion described below in this data protection declaration.

Requirement to provide personal data

The contact forms are used on a voluntary basis and are neither contractually nor legally required. You are not obliged to contact us via the contact form, but can also use the other contact options specified on our website. If you want to use our contact form, you must fill out the fields marked as mandatory. If you do not fill out the necessary information on the contact form, you either cannot send the request or we cannot process your request.

Scope of processing of personal data and collected personal data

The registration and login data you have entered with us or communicated to you.

The registration and login data you have entered with us or communicated to you.

Legal basis for processing personal data

Article 6 paragraph 1 lit. b GDPR (implementation of (pre)contractual measures)

Purpose of Data Processing

You have the option of using a separate login area on our website. So that we can check your authorization to use the protected area or the protected documents, you must enter your login data (e-mail or user name and password) in the appropriate form. If required, we can send you your login data or the option of having your password reset by email on request.

Duration of Storage

The data collected will be stored for as long as you maintain a user account with us.

Possibility of Objection and Deletion

You can object to the processing at any time in accordance with Article 21 GDPR and request the deletion of data in accordance with Article 17 GDPR. You can find out which rights you are entitled to and how to assert them at the bottom of this data protection declaration.

Requirement to provide personal data

The use of the login area on our site is contractually required to use the protected area. It is not possible to use the content protected by the login area without entering personal data. If you would like to use our login area, you must fill out the fields marked as mandatory (user name and password). Entering the data requires the existence of a user account. Registration is not possible if the data you have entered is incorrect. If you enter the data incorrectly or not at all, the protected area cannot be used. However, the rest of the page can still be used without logging in.

 

Allocatus Cloud Service Features

Calendar Synchronization

Scope of processing of personal data and collected personal data

The data you enter with us and data from Microsoft Project, which you publish via our service.

 

Legal basis for processing personal data

Article 6 paragraph 1 lit. b GDPR (implementation of (pre)contractual measures)

 

Purpose of Data Processing

To provide and maintain the Allocatus Cloud service.

 

Duration of Storage

The data collected will be stored for as long as you have an Allocatus Cloud subscription with us.

 

Possibility of objection and deletion

You can object to the processing at any time in accordance with Article 21 GDPR and request the deletion of data in accordance with Article 17 GDPR. You can find out which rights you are entitled to and how to assert them at the bottom of this data protection declaration.

 

Requirement to Provide Personal Data

It is not possible to use the Allocatus Cloud service without entering personal data. If you would like to use our Allocatus cloud service, you must fill in the fields marked as mandatory (user name and password). Entering the data requires the existence of a user account. Registration is not possible if the data you have entered is incorrect. If you enter the data incorrectly or not at all, the service area cannot be used.

 

Allocatus Web App

Scope of processing of personal data and collected personal data

The data you enter with us and data from Microsoft Project, which you publish via our service.

 

Legal basis for processing personal data

Article 6 paragraph 1 lit. b GDPR (implementation of (pre)contractual measures)

 

Purpose of Data Processing

For the provision and maintenance of the Allocatus Cloud service and the Website https://webapp.cloud.allocatus.com/ and the associated Microsoft Teams app.

 

Duration of storage

The data collected will be stored for as long as you have an Allocatus Cloud subscription with us.

 

Possibility of objection and deletion

You can object to the processing at any time in accordance with Article 21 GDPR and request the deletion of data in accordance with Article 17 GDPR. You can find out which rights you are entitled to and how to assert them at the bottom of this data protection declaration.

 

Requirement to provide personal data

It is not possible to use the Allocatus Cloud service without entering personal data. If you would like to use our Allocatus cloud service, you must fill in the fields marked as mandatory (user name and password). Entering the data requires the existence of a user account. Registration is not possible if the data you have entered is incorrect. If you enter the data incorrectly or not at all, the service area cannot be used.

 

Statistical evaluation of visits to this website - web tracker

We collect, process and store the following data when you access this website or individual files on the website: IP address, website from which the file was accessed, name of the file, date and time of access, amount of data transferred and notification of success of retrieval (so-called web log). We use this access data exclusively in a non-personalized form for the continuous improvement of our website and for statistical purposes. We also use the following web trackers to evaluate visits to this website:

 

Google Tag Manager

What personal data is collected and to what extent is it processed?

On our site we use the service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Tag Manager). Google Tag Manager offers a technical platform to run other web services and web tracking programs using so-called "tags" and to be able to control them in a bundle. In this context, Google Tag Manager stores cookies on your computer and analyzes your surfing behavior (so-called “tracking”) if web tracking tools are run using Google Tag Manager. This data sent by individual tags integrated into Google Tag Manager is merged, stored and processed by Google Tag Manager under a uniform user interface. All integrated "tags" are listed separately in this data protection declaration. You can find more information on the data protection of the tools integrated in Google Tag Manager in the respective section of this data protection declaration. When using our website with the activated integration of tags from Google Tag Manager, data such as your IP address and your user activities are transmitted to servers of Google Ireland Limited and processed and processed outside the European Union, e.g. in the USA saved. The EU Commission has determined that there can be an adequate level of data protection in the USA if the data-processing company has submitted to the US-EU Privacy Shield Agreement and the data export to the USA has been designed to be permissible in this way. This is the case with Google Ireland Limited. With regard to the web services integrated using Google Tag Manager, the regulations in the respective section of this data protection declaration apply. The tracking tools used in Google Tag Manager ensure by IP anonymization of the source code that the IP address of Google Tag Manager is anonymized before transmission. Here, Google Tag Manager is only enabled to collect IP addresses anonymously (so-called IP masking).

Legal basis for processing personal data

According to Article 6 Paragraph 1 Letter a GDPR, the legal basis for data processing is your consent in our information banner regarding the use of cookies and web tracking (consent through clear confirmatory action or behavior).

Purpose of Data Processing

On our behalf, Google will use the information obtained using the Google Tag Manager to evaluate your visit to this website, to compile reports on website activity and to provide us with other services related to website activity and internet usage.

Duration of Storage

Google will store the data relevant to the function of Google Tag Manager for as long as is necessary to fulfill the booked web service. The data is collected and stored anonymously. If there is a personal reference, the data will be deleted immediately, provided they are not subject to any statutory retention requirements. In any case, the deletion takes place after the retention period has expired.

Possibility of objection and deletion

You can prevent the collection and forwarding of personal data to Google (in particular your IP address) and the processing of this data by Google by deactivating the execution of script code in your browser, installing a script blocker in your browser or Activate the "Do Not Track" setting in your browser. You can also prevent Google from collecting the data generated by the Google cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link http://tools.google.com/dlpage/gaoptout?hl=de Google's security and privacy principles can be found at https://policies.google.com/privacy.

Google-Analytics

Scope of processing of personal data

On our site we use the web tracking service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Analytics). As part of web tracking, Google Analytics uses cookies that are stored on your computer and enable an analysis of the use of our website and your surfing behavior (so-called tracking). We carry out this analysis on the basis of the Google Analytics tracking service in order to constantly optimize our website and make it more available. As part of the use of our website, data such as your IP address and your user activities are transmitted to servers of the company Google Ireland Limited. We carry out this analysis on the basis of Google's tracking service in order to constantly optimize our website and make it more available. We also need web tracking for security reasons. Web tracking enables us to track whether third parties are attacking our website. The information from the web tracker enables us to take effective countermeasures and protect the personal data we process from these cyber attacks. By activating IP anonymization within the Google Analytics tracking code on this website, your IP address will be anonymized by Google Analytics before transmission. This website uses a Google Analytics tracking code that includes the operator gat._anonymizeIp(); was expanded to only allow anonymous collection of IP addresses (so-called IP masking).

Legal basis for processing personal data

According to Article 6 Paragraph 1 Letter a GDPR, the legal basis for data processing is your consent in our information banner regarding the use of cookies and web tracking (consent through clear confirmatory action or behavior).

Purpose of Data Processing

On our behalf, Google will use this information to evaluate your visit to this website, to compile reports on website activity and to provide us with other services related to website activity and internet usage. We also need web tracking for security reasons. Web tracking enables us to track whether third parties are attacking our website. The information from the web tracker enables us to take effective countermeasures and protect the personal data we process from these cyber attacks.

Duration of Storage

Google will store the data relevant to the provision of web tracking for as long as is necessary to fulfill the booked web service. The data is collected and stored anonymously. If there is a personal reference, the data will be deleted immediately, provided they are not subject to any statutory retention requirements. In any case, the deletion takes place after the retention period has expired.

Objection and Deletion Options

You can prevent the collection and forwarding of personal data to Google (in particular your IP address) and the processing of this data by Google by deactivating the execution of script code in your browser or by setting your browser to "Do Not Track". activate. You can also prevent Google from collecting the data generated by the Google cookie and relating to your use of the website (including your IP address) and from processing this data by Google by clicking on the following link (http: //tools.google.com/dlpage/gaoptout?hl=de) and install the available browser plug-in. You can find Google's security and privacy principles at https://policies.google.com/privacy?hl=de.

Click here to opt out of being tracked by Google Analytics.

Integration of external web services and processing of data outside the EU

On our website we use active content from external providers, so-called web services. By accessing our website, these external providers may receive personal information about your visit to our website. It may be possible to process data outside of the EU. You can prevent this by installing an appropriate browser plug-in or deactivating the execution of scripts in your browser. This can lead to functional restrictions on websites that you visit.

We use the following external web services:

 

CloudFlare

A web service from Cloudflare, Inc., 101 Townsend St, 94107 San Francisco, United States of America (hereinafter: CloudFlare) is loaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to CloudFlare. The legal basis for data processing is Art. 6 (1) (f) GDPR. The legitimate interest consists in an error-free function of the website. Cloudflare, Inc. has certified itself under the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). Here you will find the link to the EU adequacy decision regarding the EU-US Privacy Shield: http://data.europa.eu/eli/dec_impl/2016/1250/oj. The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transmitted data can be found in the data protection declaration CloudFlare: https://www.cloudflare.com/privacypolicy/

You can prevent CloudFlare from collecting and processing your data by disabling the execution of script code in your browser or installing a script blocker.

Doubleclick

A web service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Doubleclick) is loaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Doubleclick. The legal basis for data processing is Art. 6 (1) (f) GDPR. The legitimate interest consists in an error-free function of the website. The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transmitted data can be found in the data protection declaration Doubleclick: https://policies.google.com/privacy

You can prevent Doubleclick from collecting and processing your data by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

Fonts.net / Fonts.com

A web service from Monotype GmbH, Werner-Reimers-Straße 2-4, 61352 Bad Homburg, Germany (hereinafter: Fonts.net / Fonts.com) is loaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Fonts.net / Fonts.com. The legal basis for data processing is Art. 6 (1) (f) GDPR. The legitimate interest consists in an error-free function of the website. The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transmitted data can be found in the data protection declaration of Fonts.net / Fonts.com: http://www.monotype.com/legal/privacy-policy

You can prevent Fonts.net / Fonts.com from collecting and processing your data by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

Google

A web service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google) is loaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Google. The legal basis for data processing is Art. 6 (1) (f) GDPR. The legitimate interest consists in an error-free function of the website. The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transmitted data can be found in the data protection declaration of Google: https://policies.google.com/privacy

You can prevent Google from collecting and processing your data by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

Google Fonts

A web service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google Fonts) is loaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Google Fonts. The legal basis for data processing is Art. 6 (1) (f) GDPR. The legitimate interest consists in an error-free function of the website. The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transmitted data can be found in the data protection declaration of Google Fonts: https://policies.google.com/privacy

You can prevent Google Fonts from collecting and processing your data by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

Google APIS

A web service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google APIS) is loaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Google APIS. The legal basis for data processing is Art. 6 (1) (f) GDPR. The legitimate interest consists in an error-free function of the website. The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transmitted data can be found in the data protection declaration Google APIS: https://policies.google.com/privacy

You can prevent Google APIS from collecting and processing your data by disabling the execution of script code in your browser or installing a script blocker in your browser.

Gstatic

A web service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Gstatic) is loaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Gstatic. The legal basis for data processing is Art. 6 (1) (f) GDPR. The legitimate interest consists in an error-free function of the website. The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transmitted data can be found in the data protection declaration of Gstatic: https://policies.google.com/privacy

You can prevent Gstatic from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker in your browser.

Youtube

A web service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Youtube) is loaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to YouTube. The legal basis for data processing is Art. 6 (1) (f) GDPR. The legitimate interest consists in an error-free function of the website. The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transmitted data can be found in the data protection declaration of Youtube: https://policies.google.com/privacy

You can prevent YouTube from collecting and processing your data by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

website-check.de

A web service from Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany (hereinafter: website-check.de) is loaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to website-check.de. The legal basis for data processing is Art. 6 (1) (f) GDPR. The legitimate interest consists in an error-free function of the website. The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transmitted data can be found in the data protection declaration ofwebsite-check.de: https://www.website-check.de/datenschutzerklaerung/

You can prevent website-check.de from collecting and processing your data by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

Information on the use of cookies

Scope of processing of personal data

We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. The so-called "cookies" are small text files that your browser can save on your access device. These text files contain a characteristic string of characters that uniquely identifies the browser when you return to our website. The process of saving a cookie file is also known as "setting a cookie". Cookies can be set both by the website itself and by external web services.

 

Legal basis for processing personal data

Article 6 paragraph 1 letter f GDPR (legitimate interest) or Article 6 paragraph 1 letter a or Article 9 paragraph 1 letter a GDPR (consent).

Which legal basis is relevant can be found in the cookie table listed later in this point.

In general, with cookies that are collected on the basis of a legitimate interest, our legitimate interest is to ensure the functionality of our website and the services integrated on it (technically necessary cookies). It is also possible that the cookies increase your user-friendliness and enable a more individual approach. Here we have weighed up your interests and our interests.

With the help of cookie technology, we can only identify, analyze and track individual website visitors if the website visitor has consented to the use of cookies in accordance with Article 6 (1) (a) GDPR.

 

Purpose of Data Processing

The cookies are set by our website or the external web services in order to maintain the full functionality of our website, to improve user-friendliness or to pursue the purpose given with your consent. Cookie technology also enables us to recognize individual visitors using pseudonyms, e.g. an individual or random ID, so that we can offer more individual services. Details are listed in the table below.

 

Duration of Storage

The cookies listed below are stored in your browser until they are deleted or, in the case of a session cookie, until the session has expired. Details are listed in the table below: