Privacy policy

1) Information about the collection of personal data and contact data of the Controller

1.1 We are delighted that you have visited our website and thank you for your interest. Below, we provide information on how your personal data is handled when you visit our website. In this context, personal data is all data that can be used to personally identify you.

1.2 Controller for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is exocad GmbH, Julius-Reiber-Straße 37, 64293 Darmstadt, Germany, tel.: +49 61 51 / 629 48 90, fax: +49 61 51 / 629 48 99, email: info@exocad.com. The person responsible for processing personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 The Controller has appointed a Data Protection Officer, who can be contacted as follows: Ilona Wirrmann, Kirchberger Straße 31, 64823 Groß-Umstadt. Tel.: +49 6078 93017113, email: wirrmann@iw-buweomanagement.de "

1.4 This website uses SSL and TLS encryption for security reasons and in order to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the Controller). A secure connection is designated by the prefix “https://” and the padlock icon in your browser line.

2) Data recording when visiting our website

When you visit our website purely for information purposes, i.e. do not register or transmit information to us in any other way, we only collect the data that your browser transmits to our server (known as server log files). When you access our website, we collect the following data, which is a technical requirement that allows us to display the website:

Processing is in accordance with Art. 6 Para. 1 lit. f GDPR, based on our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used in any other way. However, we retain the right to check the server log files subsequently should concrete indications of unlawful use arise.

3) Data collection and use when registering for the closed area

When we give you access to the secure area of our website, you must provide a username and password to log into the user account you have created. We store and use this information solely for the purpose of granting you access to the secure area of the website. The processing of this data is necessary in accordance with Art. 6 Para. 1 S. 1 lit. b) or lit. f) for the fulfilment of the contract concerning your user account or for the protection of our legitimate interests, the provision of the user account function. These data are stored on our servers in Germany, are not passed on to third parties and are deleted immediately as soon as your user account expires.

If you use our library download service, we also record your e-mail address and the serial number of the Exocad dongle. This information is only used to determine which libraries were downloaded by which customer and to adapt the downloaded library to the specific license of the exo-cad software. This is to protect our legitimate interests according to Art. 6 para. 1 1 lit. f) GDPR, namely to protect the intellectual property of the libraries and to ensure the usability of the libraries and the correct maintenance of the software.

This data is stored on our servers in Germany. It will not be passed on to third parties and will be deleted after your account expires.

4) Cookies

In order to make visiting our website more attractive and allow the use of certain functions, we use cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are erased at the end of the browser session, i.e. when the browser is closed (session cookies). Other cookies remain on your end device and allow us or our partner companies (cookies from third party providers) to recognize your browser on your next visit (persistent cookies). Where cookies are saved, they collect and process certain user information, such as browser and location data and IP address values, in an individual scope. Persistent cookies are automatically erased after a prescribed period, which differs from cookie to cookie.

Some cookies are used to simplify the order process by saving settings (e.g. remembering the content of a virtual shopping cart for a subsequent visit to the website). Where individual cookies implemented by us also process personal data, this processing is either in accordance with Art. 6 Para. 1 lit. b GDPR in order to perform the contract or in accordance with Art. 6 Para. 1 lit. f GDPR in order to protect our legitimate interests in the best possible function of the website and a customer-friendly and effective design of the page visit.

In some circumstances, we work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also saved on your computer when you visit our website in this case (cookies from third party providers). When we work with the aforementioned advertising partners, you will be individually and separately notified of the use of such cookies and the scope of the information collected in each case within the paragraphs below.

Please note that you can make settings in your browser to ensure that you are notified of the saving of cookies and can decide whether to accept cookies on a case-by-case basis, in certain cases, or not at all. Each browser differs in the way the cookie settings are managed. This is described in the Help menu of each browser, where you can find out how to change your cookie settings. You will find these under the following links for the respective browsers:

Internet Explorer: support.microsoft.com/de-en/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: support.mozilla.org/en/kb/cookies-allow-and-reject
Chrome: support.google.com/chrome/answer/95647
Safari: support.apple.com/en/guide/safari/sfri11471/mac
Opera: help.opera.com/en/latest/web-preferences/

Please note that not accepting cookies may impair the function of our website.

5) Contacting us

Personal data is collected when you contact us (e.g. using the contact form or via email). In the case of contact forms, each contact form shows which data is collected. This data is saved and used exclusively for the purpose of responding to your concern, making contact, and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to you concern in accordance with Art. 6 Para. 1 lit. f GDPR. If the objective of your contacting us is to conclude a contract, Art. 6 Para. 1 lit. b GDPR is an additional legal basis. Your data is erased once your inquiry has been fully processed; this is the case when the circumstances indicate that the situation concerned has been conclusively clarified and no statutory retention periods apply.

6) Data processing when opening an account and for contract processing

In accordance with Art. 6 Para. 1 lit. b GDPR, personal data continues to be collected and processed when you disclose it to us in order to execute a contract or open a customer account. Each form shows which data is collected. Your customer account can be erased at any time by sending a message to the address of the Controller above. We save and use the data you share with us for contract processing. Following full processing of the contract or erasure of your customer account, your data is blocked, taking retention periods under tax and trade law into account. It is then erased after expiry of these periods, unless you have explicitly given permission for further use of your data or we have retained the right to further data use as permitted by the law. We provide information on this below.

7) Comments function

In the comments function on this website, information about the time the comment was created and the user name selected by you are saved and published on the website alongside your comment. Your IP address is also logged and saved. This saving of the IP address is for security reasons and in case the affected person violates the rights of third parties with a comment posted or posts unlawful content. We require your email address in order to contact you if a third party makes a complaint that the content you have published is unlawful. The legal basis for the saving of your data is Art. 6 Paras. 1 lit.b and f GDPR. We retain the right to delete comments where a third party makes a complaint that they are unlawful.

As a user, you can subscribe to the follow-up comments. When you do so, you will receive a confirmation email to ensure that you are the holder of the email address provided (double opt-in process). The legal basis for data processing in the case of subscription to comments is Art. 6 Para. 1 lit.a GDPR. You can cancel ongoing comment subscriptions at any time with effect for the future; please see the confirmation email for more information on this option.

8) Use of your data for direct advertising

8.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will send you regular information on our offers. The only piece of information that is compulsory in order to receive the newsletter is your email address. Any further data is provided on a voluntary basis and used to address you personally. We use the double opt-in process for sending the newsletter. This means that we will only begin sending you the email newsletter once you have explicitly confirmed your permission for the sending of the newsletter. We will then send you a confirmation email, in which you are asked to click a link to confirm that you would like to receive the newsletter in future.

By activating the confirmation link, you grant us permission to use your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. When you register for the newsletter, we save the IP address entered for you by your internet service provider (ISP) and the date and time of registration in order to trace any potential misuse of your email address at a later date. The data we collect upon registration for the newsletter is used exclusively for advertising purposes within the scope of the newsletter. You can unsubscribe from the newsletter at any time using the link in the newsletter or by notifying the Controller named at the top of this page. Once you have successfully unsubscribed, your email address will be immediately deleted from our newsletter mailing list, unless you have explicitly given consent for further use of your data or we have retained the right to make further use of your data that is permitted under the law and about which we inform you in this Privacy Policy.

8.2 Sending the newsletter via CleverReach

Our newsletter is sent by the technical services provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede (“CleverReach”), to whom we disclose the data you provide when registering for the newsletter. This disclosure is in accordance with Art. 6 Para. 1 lit. f GDPR and serves our legitimate interest in the use of a promotionally effective, secure and user-friendly newsletter system. The data you enter for the purpose of receiving the newsletter (e.g. email address) is saved on the CleverReach servers in Germany and Ireland.

CleverReach uses this information to send and statistically analyze the newsletter on our behalf. For this analysis, the emails sent contain web beacons or tracking pixels – one-pixel image files that are saved on our website. This enables us to determine whether a newsletter message has been opened and which links have been clicked. Using conversion tracking, we can also analyze whether clicking the link in the newsletter is followed by a pre-defined action (e.g. purchase of a product on our website). Technical information (e.g. time of access, IP address, browser type and operating system) is also recorded. The data is collected exclusively in pseudonymized form and is not linked to other personal data on you; direct reference to a person is ruled out. This data is used exclusively for statistical analysis of newsletter campaigns. The results of these analyses can be used to adapt future newsletters better to the interests of the recipients.

If you would like to object to this data analysis for the purposes of statistical analysis, you need to unsubscribe from the newsletter.
We have concluded an data processing agreement with CleverReach, in which we obligate CleverReach to protect our customers’ data and prohibit them from disclosing it to third parties.

You can find further information on data analysis by CleverReach here:
www.cleverreach.com/de/funktionen/reporting-und-tracking/
You can view the CleverReach's Privacy Policy here:
www.cleverreach.com/de/datenschutz/.

8.3 Advertising by mail

Based on our legitimate interest in personalized direct advertising, we retain the right to save your full name, your postal address and – where we have received such additional information from you as part of the contractual relationship – your title, academic status, year of birth, profession, sector and business in accordance with Art. 6 Para. 1 lit. f GDPR and to use such data in order to send interesting offers and information on our products by mail.

You can object to the saving and use of your data for this purpose at any time by sending a message to this effect to the Controller.

9) Use of Social Media: Videos

Use of Youtube videos

This website uses the YouTube embedding function to display and play videos from the provider “YouTube”, which is part of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

This is done using the enhanced data protection mode, which the provider claims only triggers the saving of user information when the video is played. If embedded YouTube videos are played, the provider uses YouTube cookies to collect information about the user behavior. According to information from YouTube, the functions of this include recording video statistics, improving user friendliness and preventing improper conduct. If you are logged in to Google, your data will be matched directly to your account when you click on a video. If you do not want your profile to be matched by YouTube, you must log out before activating the button. Google saves and analyzes your data as a usage profile (even for users who are not logged in). This analysis is conducted in particular in accordance with Art. 6 Para. 1 lit.f GDPR based on the legitimate interests of Google in showing personalized advertising, market research and/or needs-based website design. You have the right to object to the formation of these user profiles; to exercise it, you must contact YouTube. When you use YouTube, your personal data may be transmitted to the servers of Google LLC. in the USA.

Regardless of whether the embedded videos are played, every time this website is accessed, a connection to the Google network is established. This may trigger further data processing processes not under our control.

Where personal data is transmitted to Google LLC. in the USA, Google LLC. is certified under the EU-US Privacy Shield, which guarantees adherence to the level of data protection applicable in the EU. A current certificate is available here: www.privacyshield.gov/list

Further information on data protection at YouTube is available in the provider’s Privacy Policy at: www.google.de/intl/de/policies/privacy

10) Web analytics services

Matomo (formerly Piwik)

On this website, data is collected and saved using the web analysis service software Matomo (www.matomo.org), a service from the provider InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, (“Matomo”) based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes in accordance with Art. 6 Para. 1 lit. f GDPR. This data may be used to create and analyze pseudonymized usage profiles for the same purpose. Cookies may be used to do this. Cookies are small text files that are saved locally in the cache of the internet browser used by the person visiting the site. Cookies allow the internet browser to be recognized, for example. The data collected using the Matomo technology (including your pseudonymized IP address is processed on our servers.

The information generated by the cookie in the pseudonymized user profile is not used to identify the user of this website personally, nor combined with personal data on the holder of the pseudonym.

If you do not agree with the saving and analysis of this data from your visit, you can object to the saving and use at any time with a click of the mouse. In this case, an opt-out cookie will be saved in your browser, which results in Matomo not collecting any session data. Please note that deleting all your cookies will also result in the opt-out cookie being deleted; you may need to activate it again.

You will find possibilities to switch off tracking by Matamo in our Cookie Policy.

11) Tools and Miscellaneous

11.1 Borlabs

This website uses the cookie preference management service Borlabs from the provider Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (“Borlabs”). This places two cookies (borlabsCookie and borlabsCookieUnblockContent) which are technically required in order to save your cookie preference. The processing described above is conducted in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in providing cookie preference management for visitors to the website.

The Borlabs cookie does not process any personal data. The preference you selected when you accessed the website is saved in the borlabsCookie cookie. The borlabsCookieUnblockContent cookie saves the (external) media/content that you would like to be unblocked automatically at all times. If you would like to object to these settings, simply delete the cookies in your browser. You will be asked for your cookie preferences again when you access/load the website again.

11.2 Google reCAPTCHA

On this website we also use the reCAPTCHA feature of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is primarily used to distinguish between input by a natural person and misuse by automated and mechanical processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our legitimate interest in establishing individual responsibility on the Internet and avoiding abuse and spam. The use of Google reCAPTCHA may also involve the transmission of personal data to the servers of Google LLC. in the USA.

In the event that personal data is transferred to Google LLC. based in the USA, Google LLC. has certified itself for the us European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: www.privacyshield.gov/list

Further information about Google reCAPTCHA and Google's privacy policy can be found at: www.google.com/intl/de/policies/privacy/

11.3 Google Maps

On our website, we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service used to display interactive maps in order to visually present geographical information. Using this service allows us to show you our location and makes it easier to find us.

Already when accessing the pages of our website in which the map from Google Maps is integrated causes information about your use of our website (such as your IP address) to be transmitted to Google servers and saved there. This may also include transmission to Google LLC. servers in the USA and occurs regardless of whether Google provides a user account into which you are logged in, or there is no user account. If you are logged in to Google, your data will be matched directly to your account. If you do not want your profile to be matched by Google, you must log out before activating the button. Google saves and analyzes your data as a usage profile (even for users who are not logged in). Collection, saving and analysis of data are conducted in accordance with Art. 6 Para. 1 lit.f GDPR based on the legitimate interests of Google in showing personalized advertising, market research and/or needs-based design of Google websites. You have the right to object to the formation of these user profiles; to exercise it, you must contact Google.

Where personal data is transmitted to Google LLC. in the USA, Google LLC. is certified under the EU-US Privacy Shield, which guarantees adherence to the level of data protection applicable in the EU. A current certificate is available here: www.privacyshield.gov/list

If you do not agree with the future transmission of your data to Google as part of your use of Google Maps, you also have the option of fully deactivating the web service of Google Maps by switching off the JavaScript application in your browser. This will mean that Google Maps and thus the maps displayed on this website cannot be used.

You can view Google's terms of use at www.google.de/intl/de/policies/terms/regional.html, and the additional terms of use for Google Maps at www.google.com/intl/de_US/help/terms_maps.html.
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"): www.google.de/intl/de/policies/privacy/

11.4 Google Web Fonts

To ensure that fonts are displayed consistently, this website uses Web Fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). When a website is accessed, your browser loads the required Web Fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to the Google servers; this may cause your personal data to be transmitted to the servers of Google LLC. in the USA. This informs Google that our website has been accessed from your IP address. Google Web Fonts is used in the interest of consistent and attractive presentation of our online services. This is a legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR. If your browser does not support Web Fonts, your computer will use a default font.

In the event that personal data is transmitted to Google LLC. based in the USA, Google LLC. has certified itself for the us European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: www.privacyshield.gov/list

You can find more information on Google Web Fonts at developers.google.com/fonts/faq and in the Google Privacy Policy: www.google.com/policies/privacy/

12) Rights of the data subject

12.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) against the Controller regarding the processing of your personal data. We inform you of these rights below:

12.2 RIGHT OF OBJECTION

IF, AS PART OF A WEIGHING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA BASED ON OUR PREVAILING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE BASED ON GROUNDS THAT RESULT FROM YOUR PARTICULAR SITUATION.

IF YOU EXECUTE YOUR RIGHT OF OBJECTION, WE WILL TERMINATE PROCESSING OF THE DATA. HOWEVER, WE RETAIN THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE URGENT LEGITIMATE GROUNDS FOR SUCH PROCESSING  THAT OUTWEIGH YOUR INTERESTS, BASIC RIGHTS AND BASIC FREEDOMS, OR IF PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA IN ORDER TO CONDUCT DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF DATA CONCERNING YOU FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. YOU CAN EXERCISE THIS OBJECTION AS DESCRIBED ABOVE.

IF YOU USE YOUR RIGHT OF OBJECTION, WE WILL TERMINATE PROCESSING OF THE DATA CONCERNED FOR THE PURPOSES OF DIRECT ADVERTISING.

13) Period of storage of personal data

The period of storage of personal data depends on the statutory retention period in each case (e.g. retention periods under trade and tax law). Following expiration of the deadline, the relevant data is routinely erased, unless it is still required for contract fulfillment or contract initiation and/or we have a legitimate interest in its continued storage.

Where personal data is processed under express consent in accordance with Art. 6 para. 1 lit. a GDPR, this data will be stored until the data subject revokes his consent.

Should statutory retention periods exist for data which is processed in connection with contractual or pre.-contractual obligations on the basis of Art. 6 para. 1 lit. b GDPR this data will be routinely erased after expiration of the retention period, provided that it is not required for contractual performance or pre-contractual performance or we have a legitimate interest in the ongoing storage.

When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR this data will be stored until the data subject executes his objection right in accordance with Art. 21 para. 1 GDPR unless we can prove the existence of compulsory legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject or the processing serves the purpose of enforcement, execution or defense against legal claims.

When processing personal data for the ourpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR this data will be stored until the data subject executes his objection right in accordance with Art. 21 para. 2 GDPR.

To the extent the other provisions of this Privacy Policy regarding specific processing situations do not contain any specific rules, stored personal data will be erased when it is not required anymore for the purposes it has been collected for.

14) Translations

This English version of the Privacy Policy forms the basis for any further translations (e.g. Spanish or Chinese) and in case of any inconsistencies or discrepancies between these versions this English version shall take precedence.