Privacy policy

1) Information on the collection of personal data and contact details of the responsible person

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the Data Protection Basic Regulation (DSGVO) is exocad GmbH, Julius-Reiber-Straße 37, 64293 Darmstadt, Germany, Tel.: +49 61 51 / 629 48 90, Fax: +49 61 51 / 629 48 99, E-Mail: info@exocad.com. The person responsible for processing personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 The person responsible has appointed a data protection officer who can be reached as follows: "Ilona Wirrmann, Kirchberger Straße 31, 64823 Groß-Umstadt. Phone: +49 6078 93017113, Mail: wirrmann@iw-buweomanagement.de"

1.4 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the responsible person). You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

2) Data acquisition when visiting our website

If you only use our website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you call up our website, we collect the following data, which is technically necessary for us to display the website to you:

- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymous form)

Processing is carried out in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

3) Data collection and use when registering for the closed area

When we give you access to the secure area of our website, you must provide a username and password to log into the user account you have created. We store and use this information solely for the purpose of giving you access to the secure area of the website. The processing of this data is necessary in accordance with Art. 6 Para. 1 S. 1 lit. b) or lit. f) for the fulfilment of the contract concerning your user account or for the protection of our legitimate interests, the provision of the user account function. These data are stored on our servers in Germany, are not passed on to third parties and are deleted immediately as soon as your user account expires.

If you use our library download service, we also record your e-mail address and the serial number of the Exocad dongle. This information is only used to determine which libraries were downloaded by which customer and to adapt the downloaded library to the specific license of the exo-cad software. This is to protect our legitimate interests according to Art. 6 para. 1 1 lit. f) GDPR, namely to protect the intellectual property of the libraries and to ensure the usability of the libraries and the correct maintenance of the software.

This data is stored on our servers in Germany. It will not be passed on to third parties and will be deleted after your account expires.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (cookies from third parties) to recognize your browser during your next visit (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). If individual cookies used by us also process personal data, processing is carried out in accordance with Art. 6 Para. 1 lit. b DSGVO either to implement the contract or in accordance with Art. 6 Para. 1 lit. f DSGVO to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive (cookies from third parties) when you visit our website. If we cooperate with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following paragraphs.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or whether to exclude the acceptance of cookies in certain cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for each browser under the following links:

Internet Explorer: support.microsoft.com/de-en/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: support.mozilla.org/en/kb/cookies-allow-and-reject
Chrome: support.google.com/chrome/answer/95647
Safari: support.apple.com/en/guide/safari/sfri11471/mac
Opera: help.opera.com/en/latest/web-preferences/

Please note that if cookies are not accepted, the functionality of our website may be restricted.

5) How to contact us

Within the scope of contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form, is apparent from the respective contact form. These data are stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in responding to your request pursuant to Art. 6 Para. 1 lit. f DSGVO. If the purpose of your contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted after final processing of your request. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided there are no legal obligations to retain data.

6) Data processing when opening a customer account and for contract processing

Pursuant to Art. 6 Para. 1 lit. b DSGVO, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. A deletion of your customer account is possible at any time and can be done by sending a message to the above address of the responsible person. We store and use the data provided by you for contract processing. After complete completion of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data from our side was reserved, about which we inform you below accordingly.

7) Comment function

As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the name of the commentary you selected will be stored and published on this website. Your IP address will also be logged and stored. This IP address is stored for security reasons and in the event that the person concerned violates the rights of third parties by submitting a comment or posts illegal content. We need your e-mail address in order to contact you if a third party should object to your published content as unlawful. The legal basis for the storage of your data is Art. 6 para. 1 lit. b and f DSGVO. We reserve the right to delete comments if they are objected to as unlawful by third parties.

Subsequent comments can be subscribed to by you as a user. You will receive a confirmation e-mail to ensure that you are the owner of the e-mail address provided (double opt-in procedure). The legal basis for data processing in the case of subscribing to comments is Art. 6 Para. 1 lit. a DSGVO. You can unsubscribe from current comment subscriptions at any time with effect for the future. For further information on the unsubscription option, please refer to the confirmation e-mail.

8) Use of your data for direct marketing purposes

8.1 Registration for our e-mail newsletter

If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. Your e-mail address is the only mandatory information for sending the newsletter. The provision of further data is voluntary and is used to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you an e-mail newsletter after you have expressly confirmed that you agree to receive the newsletter. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in the future by clicking on the appropriate link.

By activating the confirmation link, you consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a DSGVO. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to track any possible misuse of your e-mail address at a later point in time. The data collected by us when you register for the newsletter will be used exclusively for the purposes of advertising in the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the responsible person named at the beginning. After you have unsubscribed, your e-mail address will be immediately deleted from our newsletter distribution list unless you have expressly consented to the further use of your data or unless we reserve the right to make further use of your data which is permitted by law and about which we inform you in this declaration.

8.2 Newsletter dispatch via CleverReach

Our e-mail newsletter is sent by the technical service provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede ("CleverReach"), to whom we forward the data you provided when you subscribed to our newsletter. This disclosure takes place in accordance with Art. 6 Para. 1 lit. f DSGVO and serves our legitimate interest in the use of an effective, secure and user-friendly newsletter system. The data you enter for newsletter subscription purposes (e.g. e-mail address) will be stored on CleverReach's servers in Germany and Ireland.

CleverReach uses this information to send and statistically evaluate the newsletter on our behalf. For statistical purposes, the newsletters sent by e-mail contain so-called web beacons or tracking pixels, which represent one-pixel image files stored on our website. In this way it can be determined whether a newsletter message has been opened and which links have been clicked. With the help of so-called conversion tracking, it can also be analysed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on such links. Technical information is also recorded (e.g. time of access, IP address, browser type and operating system). The data is collected exclusively under a pseudonym and is not linked to your other personal data, a direct personal reference is excluded. This data is used exclusively for statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

We have concluded an order processing contract with CleverReach, under which we oblige CleverReach to protect the data of our customers and not to pass it on to third parties.

You can read more about CleverReach's data analysis here:
www.cleverreach.com/de/funktionen/reporting-und-tracking/
You can view CleverReach's privacy policy here:
www.cleverreach.com/de/datenschutz/.

8.3 Advertising by letter post

On the basis of our justified interest in personalised direct advertising, we reserve the right to store your first and last name, your postal address and - insofar as we have received this additional information from you within the framework of the contractual relationship - your title, academic degree, year of birth and your professional, branch or business name in accordance with Art. 6 Para. 1 lit. f DSGVO and to use them to send you interesting offers and information about our products by post.

You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the person responsible.

9) Use of Social Media: Videos

Use of Youtube videos

This website uses the Youtube embedding feature to display and play videos from "Youtube", a provider owned by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

This uses the advanced privacy mode, which, according to the provider, only initiates the storage of user information when the video(s) is/are played. If the playback of embedded Youtube videos is started, the provider uses "Youtube" cookies to collect information about user behaviour. According to information provided by "Youtube", these cookies serve, among other things, to collect video statistics, improve user-friendliness and prevent abusive practices. If you are logged in to Google, your information will be directly associated with your account when you click on a video. If you do not want your profile to be associated with YouTube, you must log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates them. In particular, such evaluation is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of Google's legitimate interests in the display of personalised advertising, market research and/or the design of its website to meet requirements. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. In the course of using YouTube, personal data may also be transmitted to the servers of Google LLC. in the USA.
Irrespective of any reproduction of the embedded videos, each time you visit this website, you will be connected to the Google network, which may trigger further data processing operations without our influence.

In the event that personal data is transferred to Google LLC. based in the USA, Google LLC. has certified itself for the us European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: www.privacyshield.gov/list

Further information on data protection at "YouTube" can be found in the provider's data protection declaration at: www.google.de/intl/de/policies/privacy

10) Web analytics services

Matomo (formerly Piwik)

On this website data is collected and stored using the web analysis service software Matomo (www.matomo.org), a service of the provider InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, ("Mataomo") on the basis of our justified interest in the statistical analysis of user behaviour for optimisation and marketing purposes in accordance with Art. 6 para. 1 lit. f DSGVO. From this data, pseudonymised user profiles can be created and evaluated for the same purpose. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the Internet browser of the page visitor. The cookies enable, among other things, the recognition of the Internet browser. The data collected using Matomo technology (including your pseudonymised IP address) is processed on our servers.

The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym.

If you do not agree with the storage and evaluation of this data from your visit, you can object to its storage and use for the future at any time by mouse click. In this case, a so-called opt-out cookie is stored in your browser, with the result that Matomo does not collect any session data. Please note that the complete deletion of your cookies means that the opt-out cookie will also be deleted and may have to be reactivated by you.

You will find possibilities to switch off tracking by Matamo in our Cookie Policy.

11) Tools and Miscellaneous

11.1 Google reCAPTCHA

On this website we also use the reCAPTCHA feature of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is primarily used to distinguish between input by a natural person and misuse by automated and mechanical processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our legitimate interest in establishing individual responsibility on the Internet and avoiding abuse and spam. The use of Google reCAPTCHA may also involve the transmission of personal data to the servers of Google LLC. in the USA.

In the event that personal data is transferred to Google LLC. based in the USA, Google LLC. has certified itself for the us European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: www.privacyshield.gov/list

Further information about Google reCAPTCHA and Google's privacy policy can be found at: www.google.com/intl/de/policies/privacy/

11.2 Google Maps

On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service that displays interactive (land) maps to visually represent geographic information. Using this service will show you our location and make it easier for you to get there.

Already when you call up the subpages in which the Google Maps map is integrated, information about your use of our website (e.g. your IP address) is transmitted to and stored by Google on servers of Google, which may also transmit it to servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account that you are logged in to or whether a user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and evaluation are carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of Google's legitimate interest in the display of personalised advertising, market research and/or the demand-oriented design of Google websites. You have the right to object to the creation of these user profiles and must contact Google to exercise this right.

In the event that personal data is transferred to Google LLC. based in the USA, Google LLC. has certified itself for the us European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: www.privacyshield.gov/list

If you do not agree with the future transmission of your data to Google within the scope of the use of Google Maps, there is also the possibility to completely deactivate the web service of Google Maps by switching off the application JavaScript in your browser. Google Maps and thus also the map display on this website can then not be used.

You can view Google's terms of use at www.google.de/intl/de/policies/terms/regional.html, and the additional terms of use for Google Maps at www.google.com/intl/de_US/help/terms_maps.html.
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"): www.google.de/intl/de/policies/privacy/

11.3 Google Web Fonts

This site uses web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the purpose of displaying fonts in a consistent manner. When you access a page, your browser loads the web fonts you need into its browser cache to display text and fonts correctly.

To do this, the browser you are using must connect to Google's servers. This may also involve the transmission of personally identifiable information to Google LLC. servers in the United States. In this way, Google becomes aware that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If your browser does not support web fonts, a standard font will be used by your computer.

In the event that personal data is transmitted to Google LLC. based in the USA, Google LLC. has certified itself for the us European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: www.privacyshield.gov/list

More information about Google Web Fonts can be found at developers.google.com/fonts/faq and in Google's privacy statement: www.google.com/policies/privacy/

12) Rights of the data subject

12.1 The applicable data protection law grants you comprehensive data subject rights (information and intervention rights) vis-à-vis the person responsible with regard to the processing of your personal data, about which we will inform you below:

Right of access pursuant to Art. 15 DSGVO: In particular, you have a right of access to your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the planned storage period. the criteria for determining the storage period, the existence of a right to rectification, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it has not been collected by us from you, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and desired effects of such processing concerning you, as well as your right to be informed of the guarantees pursuant to Art. 46 DSGVO in the event of transfer of your data to third countries;

Right of rectification pursuant to Art. 16 DSGVO: You have the right to have inaccurate data concerning you rectified without delay and/or your incomplete data stored by us completed;

Right of deletion pursuant to Art. 17 DSGVO: You have the right to demand the deletion of your personal data if the conditions of Art. 17 para. 1 DSGVO are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;

Right to limitation of processing pursuant to Art. 18 DSGVO: You have the right to demand limitation of processing of your personal data as long as the correctness of your data, which you dispute, is verified, if you refuse to delete your data due to inadmissible data processing and instead demand limitation of processing of your data, if you need your data to assert, exercise or defend legal claims after we no longer need this data after achieving the purpose or if you have lodged an objection due to reasons of your particular situation, as long as it is not yet known whether our justified reasons prevail;

Right to information pursuant to Art. 19 DSGVO: If you have asserted the right to rectification, cancellation or limitation of processing to the data controller, the data controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, cancellation or limitation of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of such recipients.

Right to data transfer in accordance with Art. 20 DSGVO: You have the right to receive the personal data you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another responsible person, insofar as this is technically feasible;

Right to revoke consent granted pursuant to Art. 7 (3) DSGVO: You have the right to revoke consent once granted for the processing of data at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned unless further processing can be based on a legal basis for processing without consent. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the revocation;

Right of appeal pursuant to Art. 77 DSGVO: If you are of the opinion that the processing of your personal data violates the DSGVO, you have the right - without prejudice to any other administrative or judicial remedy - to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place where the alleged violation occurred.

12.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA AS PART OF A WEIGHING OF INTERESTS ON THE BASIS OF OUR PREDOMINANTLY LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU MAKE USE OF YOUR RIGHT OF OBJECTION, WE WILL TERMINATE THE PROCESSING OF THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING GROUNDS FOR PROCESSING WORTHY OF PROTECTION WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

13) Duration of the storage of personal data

The duration of the storage of personal data is measured according to the respective legal basis, the purpose of processing and - if relevant - additionally according to the respective legal retention period (e.g. commercial and tax retention periods).

If personal data are processed on the basis of an express consent pursuant to Art. 6 para. 1 lit. a DSGVO, these data are stored until the data subject revokes his consent.

If there are legal storage periods for data that are processed within the framework of legal or similar obligations on the basis of Art. 6 para. 1 lit. b DSGVO, these data will be routinely deleted after expiry of the storage periods if they are no longer necessary for the fulfilment of the contract or the initiation of the contract and/or if we no longer have a justified interest in further storage.

When processing personal data on the basis of Art. 6 para. 1 lit. f DSGVO, this data is stored until the data subject exercises his right of objection in accordance with Art. 21 para. 1 DSGVO, unless we can prove compelling grounds for processing worthy of protection which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

If personal data are processed for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f DSGVO, these data are stored until the data subject exercises his right of objection pursuant to Art. 21 para. 2 DSGVO.

Unless otherwise stated in the other information contained in this declaration on specific processing situations, stored personal data will otherwise be deleted if they are no longer necessary for the purposes for which they were collected or otherwise processed.