1.1 We are delighted that you have visited our website and thank you for your interest. Below, we provide information on how your personal data is handled when you visit our website. In this context, personal data is all data that can be used to personally identify you.
1.2 Controller for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is exocad GmbH, Rosa-Parks-Str. 2, 64295 Darmstadt, Germany, tel.: +49 61 51 / 629 48 90, fax: +49 61 51 / 629 48 99, email: info@exocad.com. The Controller for the processing of personal data is the natural or legal person that decides, alone or together with others, on the purposes and means of processing personal data.
1.3 The Controller has appointed a Data Protection Officer, who can be contacted as follows: "Fieldfisher LLP, Riverbank House, Swan Lane 2, EC4R 3TT London / UK., email: Privacy@aligntech.com
1.4 This website uses SSL and TLS encryption for security reasons and in order to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the Controller). A secure connection is designated by the prefix “https://” and the padlock icon in your browser line.
When you visit our website purely for information purposes, i.e. do not register or transmit information to us in any other way, we only collect the data that your browser transmits to our server (known as server log files). When you access our website, we collect the following data, which is a technical requirement that allows us to display the website:
Processing is in accordance with Art. 6 Para. 1 lit. f GDPR, based on our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used in any other way. However, we retain the right to check the server log files subsequently should concrete indications of unlawful use arise.
When we give you access to the secure area of our website, you must provide a username and password to log into the user account you have created. We store and use this information solely for the purpose of granting you access to the secure area of the website. The processing of this data is necessary in accordance with Art. 6 Para. 1 S. 1 lit. b) or lit. f) for the fulfilment of the contract concerning your user account or for the protection of our legitimate interests, the provision of the user account function. These data are stored on our servers in Germany, are not passed on to third parties and are deleted immediately as soon as your user account expires.
If you use our library download service, we also record your e-mail address and the serial number of the Exocad dongle. This information is only used to determine which libraries were downloaded by which customer and to adapt the downloaded library to the specific license of the exo-cad software. This is to protect our legitimate interests according to Art. 6 para. 1 1 lit. f) GDPR, namely to protect the intellectual property of the libraries and to ensure the usability of the libraries and the correct maintenance of the software.
This data is stored on our servers in Germany. It will not be passed on to third parties and will be deleted after your account expires.
In order to make visiting our website more attractive and allow the use of certain functions, we use cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are erased at the end of the browser session, i.e. when the browser is closed (session cookies). Other cookies remain on your end device and allow us or our partner companies (cookies from third party providers) to recognize your browser on your next visit (persistent cookies). Where cookies are saved, they collect and process certain user information, such as browser and location data and IP address values, in an individual scope. Persistent cookies are automatically erased after a prescribed period, which differs from cookie to cookie.
Some cookies are used to simplify the order process by saving settings (e.g. remembering the content of a virtual shopping cart for a subsequent visit to the website). Where individual cookies implemented by us also process personal data, this processing is either in accordance with Art. 6 Para. 1 lit. b GDPR in order to perform the contract or in accordance with Art. 6 Para. 1 lit. f GDPR in order to protect our legitimate interests in the best possible function of the website and a customer-friendly and effective design of the page visit.
In some circumstances, we work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also saved on your computer when you visit our website in this case (cookies from third party providers). When we work with the aforementioned advertising partners, you will be individually and separately notified of the use of such cookies and the scope of the information collected in each case within the paragraphs below.
Please note that you can make settings in your browser to ensure that you are notified of the saving of cookies and can decide whether to accept cookies on a case-by-case basis, in certain cases, or not at all. Each browser differs in the way the cookie settings are managed. This is described in the Help menu of each browser, where you can find out how to change your cookie settings. You will find these under the following links for the respective browsers:
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Please note that not accepting cookies may impair the function of our website.
Personal data is collected when you contact us (e.g. using the contact form or via email). In the case of contact forms, each contact form shows which data is collected. This data is saved and used exclusively for the purpose of responding to your concern, making contact, and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to you concern in accordance with Art. 6 Para. 1 lit. f GDPR. If the objective of your contacting us is to conclude a contract, Art. 6 Para. 1 lit. b GDPR is an additional legal basis. Your data is erased once your inquiry has been fully processed; this is the case when the circumstances indicate that the situation concerned has been conclusively clarified and no statutory retention periods apply.
In accordance with Art. 6 Para. 1 lit. b GDPR, personal data continues to be collected and processed when you disclose it to us in order to execute a contract or open a customer account. Each form shows which data is collected. Your customer account can be erased at any time by sending a message to the address of the Controller above. We save and use the data you share with us for contract processing. Following full processing of the contract or erasure of your customer account, your data is blocked, taking retention periods under tax and trade law into account. It is then erased after expiry of these periods, unless you have explicitly given permission for further use of your data or we have retained the right to further data use as permitted by the law. We provide information on this below.
In the comments function on this website, information about the time the comment was created and the user name selected by you are saved and published on the website alongside your comment. Your IP address is also logged and saved. This saving of the IP address is for security reasons and in case the affected person violates the rights of third parties with a comment posted or posts unlawful content. We require your email address in order to contact you if a third party makes a complaint that the content you have published is unlawful. The legal basis for the saving of your data is Art. 6 Paras. 1 lit.b and f GDPR. We retain the right to delete comments where a third party makes a complaint that they are unlawful.
As a user, you can subscribe to the follow-up comments. When you do so, you will receive a confirmation email to ensure that you are the holder of the email address provided (double opt-in process). The legal basis for data processing in the case of subscription to comments is Art. 6 Para. 1 lit.a GDPR. You can cancel ongoing comment subscriptions at any time with effect for the future; please see the confirmation email for more information on this option.
8.1 Subscription to our email newsletter
If you subscribe to our email newsletter, we will send you regular information on our offers. The only piece of information that is compulsory in order to receive the newsletter is your email address. Any further data is provided on a voluntary basis and used to address you personally. We use the double opt-in process for sending the newsletter. This means that we will only begin sending you the email newsletter once you have explicitly confirmed your permission for the sending of the newsletter. We will then send you a confirmation email, in which you are asked to click a link to confirm that you would like to receive the newsletter in future.
By activating the confirmation link, you grant us permission to use your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. When you register for the newsletter, we save the IP address entered for you by your internet service provider (ISP) and the date and time of registration in order to trace any potential misuse of your email address at a later date. The data we collect upon registration for the newsletter is used exclusively for advertising purposes within the scope of the newsletter. You can unsubscribe from the newsletter at any time using the link in the newsletter or by notifying the Controller named at the top of this page. Once you have successfully unsubscribed, your email address will be immediately deleted from our newsletter mailing list, unless you have explicitly given consent for further use of your data or we have retained the right to make further use of your data that is permitted under the law and about which we inform you in this Privacy Policy.
8.2 Sending the newsletter via CleverReach
Our newsletter is sent by the technical services provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede (“CleverReach”), to whom we disclose the data you provide when registering for the newsletter. This disclosure is in accordance with Art. 6 Para. 1 lit. f GDPR and serves our legitimate interest in the use of a promotionally effective, secure and user-friendly newsletter system. The data you enter for the purpose of receiving the newsletter (e.g. email address) is saved on the CleverReach servers in Germany and Ireland.
CleverReach uses this information to send and statistically analyze the newsletter on our behalf. For this analysis, the emails sent contain web beacons or tracking pixels – one-pixel image files that are saved on our website. This enables us to determine whether a newsletter message has been opened and which links have been clicked. Using conversion tracking, we can also analyze whether clicking the link in the newsletter is followed by a pre-defined action (e.g. purchase of a product on our website). Technical information (e.g. time of access, IP address, browser type and operating system) is also recorded. The data is collected exclusively in pseudonymized form and is not linked to other personal data on you; direct reference to a person is ruled out. This data is used exclusively for statistical analysis of newsletter campaigns. The results of these analyses can be used to adapt future newsletters better to the interests of the recipients.
If you would like to object to this data analysis for the purposes of statistical analysis, you need to unsubscribe from the newsletter.
We have concluded a data processing agreement with CleverReach, in which we obligate CleverReach to protect our customers’ data and prohibit them from disclosing it to third parties.
You can find further information on data analysis by CleverReach here:
https://www.cleverreach.com/en/features/reporting-tracking/
You can view the CleverReach Privacy Policy here:
https://www.cleverreach.com/en/privacy-policy/.
8.3 Advertising by mail
Based on our legitimate interest in personalized direct advertising, we retain the right to save your full name, your postal address and – where we have received such additional information from you as part of the contractual relationship – your title, academic status, year of birth, profession, sector and business in accordance with Art. 6 Para. 1 lit. f GDPR and to use such data in order to send interesting offers and information on our products by mail.
You can object to the saving and use of your data for this purpose at any time by sending a message to this effect to the Controller.
9.1 Use of YouTube videos
This website uses the YouTube embedding function to display and play videos from the provider “YouTube”, which is part of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
This is done using the enhanced data protection mode, which the provider claims only triggers the saving of user information when the video is played. If embedded YouTube videos are played, the provider uses YouTube cookies to collect information about the user behavior. According to information from YouTube, the functions of this include recording video statistics, improving user friendliness and preventing improper conduct. If you are logged in to Google, your data will be matched directly to your account when you click on a video. If you do not want your profile to be matched by YouTube, you must log out before activating the button. Google saves and analyzes your data as a usage profile (even for users who are not logged in). This analysis is conducted in particular in accordance with Art. 6 Para. 1 lit.f GDPR based on the legitimate interests of Google in showing personalized advertising, market research and/or needs-based website design. You have the right to object to the formation of these user profiles; to exercise it, you must contact YouTube. When you use YouTube, your personal data may be transmitted to the servers of Google LLC. in the USA.
Regardless of whether the embedded videos are played, every time this website is accessed, a connection to the Google network is established. This may trigger further data processing processes not under our control.
Where personal data is transmitted to Google LLC. in the USA, Google LLC. is certified under the EU-US Privacy Shield, which guarantees adherence to the level of data protection applicable in the EU. A current certificate is available here: https://www.privacyshield.gov/list
Further information on data protection at YouTube is available in the provider’s Privacy Policy at: https://www.google.com/intl/en/policies/privacy
9.2 Use of youku.com videos
This website uses the embedding function of the video platform youku.com to display and play videos from the provider. youku.com is operated by Youku Tudou Inc. in Beijing, China.
If embedded videos are played, a connection to the servers of youku.com in China is established and technical information from the device requesting the video is transmitted to these servers. This data may include the IP address, browser and operating system type, settings and details. This data is necessary for youku.com to play out the videos requested by the user in the correct format and in accordance with the user’s preferred settings. Youku Tudou Inc. may also use the data to analyze the use of its services and to improve the user experience. For further information on the use of personal data by youku.com please use the information provided on the website youku.com.
Matomo (formerly Piwik)
On this website, data is collected and saved using the web analysis service software Matomo (www.matomo.org), a service from the provider InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, (“Matomo”) based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes in accordance with Art. 6 Para. 1 lit. f GDPR. This data may be used to create and analyze pseudonymized usage profiles for the same purpose. Cookies may be used to do this. Cookies are small text files that are saved locally in the cache of the internet browser used by the person visiting the site. Cookies allow the internet browser to be recognized, for example. The data collected using the Matomo technology (including your pseudonymized IP address is processed on our servers.
The information generated by the cookie in the pseudonymized user profile is not used to identify the user of this website personally, nor combined with personal data on the holder of the pseudonym.
If you do not agree with the saving and analysis of this data from your visit, you can object to the saving and use at any time with a click of the mouse. In this case, an opt-out cookie will be saved in your browser, which results in Matomo not collecting any session data. Please note that deleting all your cookies will also result in the opt-out cookie being deleted; you may need to activate it again.
11.1 Borlabs
This website uses the cookie preference management service Borlabs from the provider Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (“Borlabs”). This places two cookies (borlabsCookie and borlabsCookieUnblockContent) which are technically required in order to save your cookie preference. The processing described above is conducted in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in providing cookie preference management for visitors to the website.
The Borlabs cookie does not process any personal data. The preference you selected when you accessed the website is saved in the borlabsCookie cookie. The borlabsCookieUnblockContent cookie saves the (external) media/content that you would like to be unblocked automatically at all times. If you would like to object to these settings, simply delete the cookies in your browser. You will be asked for your cookie preferences again when you access/load the website again.
11.2 Google reCAPTCHA
On this website, we also use the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function serves primarily to differentiate whether an entry has been made by a natural person or improperly by mechanical or automated processing. The service includes sending the IP address and any further data needed by Google for the reCAPTCHA service to Google and is conducted in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in determining the individual willingness of actions on the internet and in preventing misuse and spam. When Google reCAPTCHA is used, your personal data may be transmitted to the servers of Google LLC. in the USA.
Where personal data is transmitted to Google LLC. in the USA, Google LLC. is certified under the EU-US Privacy Shield, which guarantees adherence to the level of data protection applicable in the EU. A current certificate is available here: https://www.privacyshield.gov/list
You can find more information on Google reCAPTCHA and the Google Privacy Policy at: https://www.google.com/intl/en/policies/privacy
11.3 Google Maps
On our website, we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service used to display interactive maps in order to visually present geographical information. Using this service allows us to show you our location and makes it easier to find us.
Already when accessing the pages of our website in which the map from Google Maps is integrated causes information about your use of our website (such as your IP address) to be transmitted to Google servers and saved there. This may also include transmission to Google LLC. servers in the USA and occurs regardless of whether Google provides a user account into which you are logged in, or there is no user account. If you are logged in to Google, your data will be matched directly to your account. If you do not want your profile to be matched by Google, you must log out before activating the button. Google saves and analyzes your data as a usage profile (even for users who are not logged in). Collection, saving and analysis of data are conducted in accordance with Art. 6 Para. 1 lit.f GDPR based on the legitimate interests of Google in showing personalized advertising, market research and/or needs-based design of Google websites. You have the right to object to the formation of these user profiles; to exercise it, you must contact Google.
Where personal data is transmitted to Google LLC. in the USA, Google LLC. is certified under the EU-US Privacy Shield, which guarantees adherence to the level of data protection applicable in the EU. A current certificate is available here: https://www.privacyshield.gov/list
If you do not agree with the future transmission of your data to Google as part of your use of Google Maps, you also have the option of fully deactivating the web service of Google Maps by switching off the JavaScript application in your browser. This will mean that Google Maps and thus the maps displayed on this website cannot be used.
You can view the Google terms of use at https://www.google.com/intl/en/policies/terms/regional.html. You will find the additional terms of use for Google Maps at https://www.google.com/intl/en_US/help/terms_maps.html
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website (“Google Privacy Policy”): https://www.google.com/intl/en/policies/privacy/
11.4 Google Web Fonts
To ensure that fonts are displayed consistently, this website uses Web Fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). When a website is accessed, your browser loads the required Web Fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to the Google servers; this may cause your personal data to be transmitted to the servers of Google LLC. in the USA. This informs Google that our website has been accessed from your IP address. Google Web Fonts is used in the interest of consistent and attractive presentation of our online services. This is a legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR. If your browser does not support Web Fonts, your computer will use a default font.
Where personal data is transmitted to Google LLC. in the USA, Google LLC. is certified under the EU-US Privacy Shield, which guarantees adherence to the level of data protection applicable in the EU. A current certificate is available here: https://www.privacyshield.gov/list
You can find more information on Google Web Fonts at https://developers.google.com/fonts/faq and in the Google Privacy Policy: https://www.google.com/intl/en/policies/privacy/
12.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) against the Controller regarding the processing of your personal data. We inform you of these rights below:
12.2 RIGHT OF OBJECTION
IF, AS PART OF A WEIGHING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA BASED ON OUR PREVAILING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE BASED ON GROUNDS THAT RESULT FROM YOUR PARTICULAR SITUATION.
IF YOU EXECUTE YOUR RIGHT OF OBJECTION, WE WILL TERMINATE PROCESSING OF THE DATA. HOWEVER, WE RETAIN THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE URGENT LEGITIMATE GROUNDS FOR SUCH PROCESSING THAT OUTWEIGH YOUR INTERESTS, BASIC RIGHTS AND BASIC FREEDOMS, OR IF PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA IN ORDER TO CONDUCT DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF DATA CONCERNING YOU FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. YOU CAN EXERCISE THIS OBJECTION AS DESCRIBED ABOVE.
IF YOU USE YOUR RIGHT OF OBJECTION, WE WILL TERMINATE PROCESSING OF THE DATA CONCERNED FOR THE PURPOSES OF DIRECT ADVERTISING.
The period of storage of personal data depends on the statutory retention period in each case (e.g. retention periods under trade and tax law). Following expiration of the deadline, the relevant data is routinely erased, unless it is still required for contract fulfillment or contract initiation and/or we have a legitimate interest in its continued storage.
Where personal data is processed under express consent in accordance with Art. 6 para. 1 lit. a GDPR, this data will be stored until the data subject revokes his consent.
Should statutory retention periods exist for data which is processed in connection with contractual or pre.-contractual obligations on the basis of Art. 6 para. 1 lit. b GDPR this data will be routinely erased after expiration of the retention period, provided that it is not required for contractual performance or pre-contractual performance or we have a legitimate interest in the ongoing storage.
When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR this data will be stored until the data subject executes his objection right in accordance with Art. 21 para. 1 GDPR unless we can prove the existence of compulsory legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject or the processing serves the purpose of enforcement, execution or defense against legal claims.
When processing personal data for the ourpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR this data will be stored until the data subject executes his objection right in accordance with Art. 21 para. 2 GDPR.
To the extent the other provisions of this Privacy Policy regarding specific processing situations do not contain any specific rules, stored personal data will be erased when it is not required anymore for the purposes it has been collected for.
This English version of the Privacy Policy forms the basis for any further translations (e.g. Spanish or Chinese) and in case of any inconsistencies or discrepancies between these versions this English version shall take precedence.
