WSCAD Privacy Policy

1. An overview of data protection
2. General information and mandatory information
3. Data protection officer
4. Recording of data on our website
5. Analysis tools and advertising
6. Newsletter
7. Plug-ins and Tools
8. Own services
9. Commercial and business services
10. Consent to the use of data collected by WSCAD
11. The security of your data

1. An overview of data protection

General information

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit our website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.

Recording of data on our website

Who is the responsible party for the recording of data on this website (i.e. the “controller”)?
The data on this website is processed by the operator of the website, whose contact information is available under section “Information Required by Law” on this website.

How do we record your data?
We collect your data as a result of your sharing of your data with us. This may, for instance be information you enter into our contact form. Our IT systems automatically record other data when you visit our website. This data comprises primarily technical information (e.g. web browser, operating system or time the site was accessed). This information is recorded automatically when you access our website.

What are the purposes we use your data for?
A portion of the information is generated to guarantee the error free provision of the website. Other data may be used to analyse your user patterns.

What rights do you have as far as your information is concerned?
You have the right to receive information about the source, recipients and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified, blocked or eradicated. Please do not hesitate to contact us at any time under the address disclosed in section “Information Required by Law” on this website if you have questions about this or any other data protection related issues. You also have the right to log a complaint with the competent supervising agency.
Moreover, under certain circumstances, you have the right to demand the restriction of the processing of your personal data. For details, please consult the Data Protection Declaration under section “Right to Restriction of Data Processing”.

Analysis tools and tools provided by third parties

There is a possibility that your browsing patterns will be statistically analysed when your visit our website. Such analyses are performed primarily with cookies and with what we refer to as analysis programmes. As a rule, the analyses of your browsing patterns are conducted anonymously; i.e. the browsing patterns cannot be traced back to you.
You have the option to object to such analyses or you can prevent their performance by not using certain tools. For detailed information about this, please consult our Data Protection Declaration below.

2. General information and mandatory information

Data protection

The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.
Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.
We herewith advise you that the transmission of data via the Internet (i.e. through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third party access.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data processing controller on this website is:

WSCAD GmbH
Dieselstraße 4
D 85232 Bergkirchen
Telephone: +49 (0) 8131 / 3627 – 0
Email: info@wscad.com

The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g. names, e-mail addresses, etc.).

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption programme. You can recognise an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.
If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Revocation of your consent to the processing of data

A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. To do so, all you are required to do is sent us an informal notification via e-mail. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her. The controller shall then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims (Article 21 of the GDPR).

Right to log a complaint with the competent supervisory agency

Without prejudice to any other administrative or judicial remedy, any data subject shall have the right to lodge a complaint with a supervising authority if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Article 77 of the GDPR). The data subject may exercise this right before a supervising authority in the Member State of his or her residence, workplace or the place of the alleged infringement. In Bavaria, the responsible supervising authority is:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27
91522 Ansbach

Right to data portability

You have the right to demand that we hand over any data we automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible (Art. 20 of the GDPR).

Right to information

The data subject shall have the right to obtain confirmation from the controller as to whether personal data concerning him or her are being processed; if this is the case, he or she shall have the right to obtain access to such personal data and to the information specified in Article 15 of the GDPR.

Right to rectification

The data subject shall have the right to obtain from the controller the rectification without undue delay of inaccurate personal data concerning him or her and, where applicable, the completion of incomplete personal data (Art. 16 of the GDPR).

Right to deletion

The data subject has the right to request the controller to delete personal data concerning him or her without undue delay, provided that one of the reasons listed in detail in Art. 17 of the GDPR applies, e.g. if the data is no longer needed for the purposes intended (right to erasure).

Right to demand processing restrictions

The data subject has the right to request the controller to restrict processing if one of the conditions listed in Art. 18 GDPR applies, e.g. if the data subject has objected to the processing, for the duration of the controller’s review.

Obligation to notify

The data subject has the right to be informed about the recipients of personal data. The controller shall notify all recipients of any corrections or erasure of personal data or restriction of processing pursuant to Article 16, Article 17 paragraph 1 and Article 18, unless this proves impossible or involves a disproportionate effort. (Art. 19 of the GDPR).

Rejection to advertising e-mails

We herewith object to the use of contact information published in conjunction with the mandatory information to be provided in section “Information Required by Law” to send us promotional and information material that we have not expressly requested. The operators of this website and its pages reserve the express right to take legal action in the event of the unsolicited sending of promotional information, for instance via SPAM messages.

Protection of the privacy of persons under 16 years on the Internet

Personal data of minors (under 16 years) will not be knowingly collected or used in any form by WSCAD GmbH. As a rule, we do not find out the age of the visitor to our Internet pages. However, we have also not taken any specific measures to protect such data to any particular extent. No personal data may be transmitted to persons under the age of 16 without the express consent of their parents or guardians.

3. Data protection officer

Designation of a data protection officer as mandated by law

We have appointed a data protection officer for our company.

Thorsten Ewald
Carl-Zeiss-Ring 21
D-85737 Ismaning

Tel: +49 (0) 89 / 99 15 22 – 0
Fax: +49 (0) 89 / 15 22 – 12
Email: dataprotection@wscad.com

4. Recording of data on our website

Cookies and Local Storage

In some instances, our website and its pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. The purpose of cookies is to make our website more user friendly, effective and more secure. Cookies are small text files that are placed on your computer and stored by your browser.
Most of the cookies we use are so-called “session cookies.” They are automatically deleted after your leave our site. Other cookies will remain archived on your device until you delete them. These cookies enable us to recognise your browser the next time you visit our website.
You can set up your browser in such a manner that you will be notified anytime cookies are placed and you can permit cookies only in certain cases or exclude the acceptance of cookies in certain instances or in general and you can also activate the automatic deletion of cookies upon closing of the browser. If you deactivate cookies, the functions of this website may be limited.
In order to be able to adapt our web sites to your personal needs and usage, we also use the so-called local storage technology (also called “local data” and “local memory”) in addition to cookies. In this process, data is stored locally in the cache of your browser, which continues to exist and can be read even after the browser window is closed or the program is terminated – provided that they do not delete the cache.
To manage local storage content, use the browser’s “History” or “Local data” settings, depending on which browser you are using. Please note that this may result in functional restrictions.
Third parties cannot access the data stored in the local storage.
Cookies that are required for the performance of the electronic communications transaction or to provide certain functions you want to use (e.g. the shopping cart function), are stored on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error free and optimised provision of the operator’s services. If other cookies (e.g. cookies for the analysis of your browsing patterns) should be stored, they are addressed separately in this Data Protection Declaration.

Information about the cookies used:

WSCADEMY.com

Server log files

The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:

• The type and version of browser used
• The used operating system
• Referrer URL
• The hostname of the accessing computer
• The time of the server inquiry
• The IP address

This data is not merged with other data sources.

This data is recorded on the basis of Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimization of the operator’s website. In order to achieve this, server log files must be recorded.

Forms

We offer forms on our website for various purposes. In addition to the registration for the newsletter (see there), these forms are offered for the purpose of contacting us, registering for training or obtaining software.

For the processing of your request, it is necessary to provide your name and e-mail address. Since many of our offers are directed at companies, the specification of a company name is also required in such cases. If you contact us or place an order for software use, licensing or training, we will use your data for the conclusion of the corresponding contract and store it for the duration of the contract and 12 months beyond. In other cases, we store the data for 12 months.

Request by e-mail, phone or fax

If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We will not share this information without your consent.
The processing of this data is based on Art. 6 para. 1 letter b of the GDPR, provided that your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 para. 1 letter a of the GDPR) and/or on our legitimate interests (Art. 6 para. 1 letter f of the GDPR), as we have a legitimate interest in the effective processing of the requests addressed to us.
The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g. after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions – in particular retention periods.

Support and Maintenance

When contacting us through our contact form for support and maintenance, there is the possibility to list the following data in order to provide our support with the necessary information to process the request. This data includes (mandatory fields):

• Salutation
• First and last name
• Postal code
• E-mail address

As well as for license activation:

• Company name
• Contact
• E-mail address
• Serial number of the relevant licenses

We shall process the data entered during the registration process on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR). You have the right to revoke at any time any consent you have already given us. To do so, all you are required to do is sent us an informal notification via e-mail. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

The data recorded during the registration process shall be stored by us as long as you are registered on our website. Subsequently, such data shall be deleted. This shall be without prejudice to any statutory retention mandates.

Processing of data (customer and contract data)

We collect, process and use personal data only to the extent necessary for the establishment, content organization or change of the legal relationship (data inventory). These actions are taken on the basis of Art. 6 Sect. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual actions. We collect, process and use personal data concerning the use of our website (usage data) only to the extent that this is necessary to make it possible for users to utilize the services and to bill for them.
The collected customer data shall be eradicated upon completion of the order or the termination of the business relationship. This shall be without prejudice to any statutory retention mandates.

Data transfer upon closing of contracts for services and digital content

We share personal data with third parties only if this is necessary in conjunction with the handling of the contract; for instance, with the financial institution tasked with the processing of payments.
Any further transfer of data shall not occur or shall only occur if you have expressly consented to the transfer. Any sharing of your data with third parties in the absence of your express consent, for instance for advertising purposes, shall not occur.
The basis for the processing of data is Art. 6 Sect. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or for pre-contractual actions.

5. Analysis tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider of these solutions is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called cookies. Cookies are text files, which are stored on your computer and that enable an analysis of the use of the website by users. The information generated by cookies on your use of this website is usually transferred to a Google server in the United States, where it is stored.
The storage of Google Analytics cookies and the utilization of this analysis tool are based on Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user patterns, in order to optimize the operator’s web offerings and advertising.

IP anonymization
We have activated the IP anonymization function on this website. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyse your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.

Browser plug-in
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. This will result in the placement of an opt out cookie, which prevents the recording of your data during future visits to this website: Google Analytics deactivation.
For more information on how Google Analytics handles user data, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Contract processing
We have concluded a contract with Google for data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics
This website uses the “demographic characteristics” function of Google Analytics. It makes it possible to generate reports providing information on the age, gender and interests of website visitors. The sources of this information are interest-related advertising by Google as well as visitor data obtained from third party providers. This data cannot be allocated to a specific individual. You have the option to deactivate this function at any time by making pertinent settings changes for advertising in your Google account or you can generally prohibit the recording of your data by Google Analytics as explained in section “Objection to the recording of data”.

Storage duration
Data stored by Google at user and event level that is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is made anonymous or deleted after 14 months. Details can be found under the following link: https://support.google.com/analytics/answer/7667196?hl=en

Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in combination with the functions of Google AdWords and Google DoubleClick, which work on all devices. The provider of these solutions is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
This function makes it possible to connect the advertising target groups generated with Google Analytics Remarketing with the functions of Google AdWords and Google DoubleClick, which work on all devices. This makes it possible to display interest-based customized advertising messages, depending on your prior usage and browsing patterns on a device (e.g. cell phone) in a manner tailored to you as well as on any of your devices (e.g. tablet or PC).
If you have given us pertinent consent, Google will connect your web and app browser progressions with your Google account for this purpose. As a result, it is possible to display the same personalized advertising messages on every device you log into with your Google account.
To support this function, Google Analytics records Google authenticated IDs of users that are temporarily linked to our Google Analytics data to define and create target groups for advertising across devices.
You can permanently object to cross-device remarketing/targeting by deactivating personalized advertising; follow this link: https://www.google.com/settings/ads/onweb/.
The consolidation of the recorded data in your Google account shall occur exclusively based on your consent, which you may give to Google and also revoke there (Art. 6 Sect. 1 lit. a GDPR). Data recording processes that are not consolidated in your Google account (for instance because you do not have a Google account or have objected to the consolidation of data), the recording of data is based on Art. 6 Sect. 1 lit. f GDPR. The legitimate interest arises from the fact that the operator of the website has a legitimate interest in the anonymized analysis of website visitor for advertising purposes.
For more information and the privacy policy, please see Google’s privacy policy at: https://policies.google.com/technologies/ads?hl=en.

Google AdWords and Google Conversion-Tracking

This website uses Google AdWords. AdWords is an online promotional program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).
In conjunction with Google AdWords, we use a tool called Conversion Tracking. If you click on an ad posted by Google, a cookie for Conversion Tracking purposes will be placed. Cookies are small text files the web browser places on the user’s computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we will be able to recognise that the user has clicked on an ad and has been linked to this page.
A different cookie is allocated to every Google AdWords customer. These cookies cannot be tracked via websites of AdWords customers. The information obtained with the assistance of the Conversion cookie is used to generate Conversion statistics for AdWords customers who have opted to use Conversion Tracking. The users receive the total number of users that have clicked on their ads and have been linked to a page equipped with a Conversion Tracking tag. However, they do not receive any information that would allow them to personally identify these users. If you do not want to participate in tracking, you have the option to object to this use by easily deactivating the Google Conversion Tracking cookie via your web browser under user settings. If you do this, you will not be included in the Conversion Tracking statistics.
The storage of “Conversion” cookies and the use of this tracking tool are based on Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user patterns, in order to optimize the operator’s web offerings and advertising.
For more information on Google AdWords and Google Conversion Tracking, please see Google’s privacy policy: https://policies.google.com/privacy?hl=en.
You can set up your browser in such a manner that you will be notified anytime cookies are placed and you can permit cookies only in certain cases or exclude the acceptance of cookies in certain instances or in general and you can also activate the automatic deletion of cookies upon closing of the browser. If you deactivate cookies, the functions of this website may be limited.

Hubspot

1. We use HubSpot for marketing activities on our website. HubSpot is a software company based in the USA with a subsidiary HubSpot Ireland Limited at 2nd Floor 30 North Wall Quay, Dublin 1, Ireland.
2. We use this integrated software solution for our own marketing, lead generation and customer service purposes. This includes email marketing, which handles the sending of newsletters as well as automated mailings, social media publishing and reporting, contact management such as user segmentation and CRM, landing pages and contact forms.
3. HubSpot uses cookies, which are small text files that are stored locally in the cache of your web browser on your end device and allow us to analyse your use of the website. HubSpot evaluates the information collected (e.g. IP address, geographical location, type of browser, duration of the visit and pages viewed) on our behalf so that we can generate reports on the visit and the pages visited.
4. Information collected by HubSpot and the content of our website is stored on servers of HubSpot’s service providers. Insofar as you have given your consent to this in accordance with Art. 6 Para. 1 Sentence 1 lit. a DSGVO, the processing on this website is carried out for the purpose of website analysis.
5. The data is generally stored in a Hubspot data centre in the EU. However, since a transfer of personal data to the USA cannot be ruled out, further protection mechanisms are required to ensure the level of data protection of the DSGVO. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavour to obtain additional regulations and assurances from the recipient in the USA.
6. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
7. You can permanently object to the collection of data by HubSpot and the setting of cookies by preventing the storage of cookies through your browser settings. You can object to the processing of your personal data at any time with effect for the future.

6. Newsletter

Newsletterdata

If you would like to subscribe to the newsletter offered on this website, we will need from you an e-mail address as well as information that allow us to verify that you are the owner of the e-mail address provided and consent to the receipt of the newsletter. No further data shall be collected or shall be collected only on a voluntary basis. We shall use such data only for the sending of the requested information and shall not share such data with any third parties.
The processing of the information entered into the newsletter subscription form shall occur exclusively on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR). You may revoke the consent you have given to the archiving of data, the e-mail address and the use of this information for the sending of the newsletter at any time, for instance by clicking on the “Unsubscribe” link in the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place prior to your revocation.
The data you archive with us for the purpose of the newsletter subscription shall be archived by us until you unsubscribe from the newsletter. Once you cancel your subscription to the newsletter, the data shall be deleted. This shall not affect data we have been archiving for other purposes.

MailChimp

This website uses the services of MailChimp to send out its newsletters. The provider is the Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
Among other things, MailChimp is a service that can be deployed to organise and analyse the sending of newsletters. Whenever you enter data for the purpose of subscribing to a newsletter (e.g. your e-mail address), the information is stored on MailChimp servers in the United States.
With the assistance of the MailChimp tool, we can analyse the performance of our newsletter campaigns. If you open an e-mail that has been sent through the MailChimp tool, a file that has been integrated into the e-mail (a so-called web-beacon) connects to MailChimp’s servers in the United States. As a result, it can be determined whether a newsletter message has been opened and which links the recipient possibly clicked on. Technical information is also recorded at that time (e.g. the time of access, the IP address, type of browser and operating system). This information cannot be allocated to the respective newsletter recipient. Their sole purpose is the performance of statistical analyses of newsletter campaigns. The results of such analyses can be used to tailor future newsletters to the interests of their recipients more effectively.
If you do not want to permit an analysis by MailChimp, you must unsubscribe from the newsletter. We provide a link for you to do this in every newsletter message. Moreover, you can also unsubscribe from the newsletter right on the website.
The data is processed based on your consent (Art. 6 Sect. 1 lit. a GDPR). You may revoke any consent you have given at any time by unsubscribing from the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place prior to your revocation.
The data you archive with us for the purpose of the newsletter subscription shall be archived by us until you unsubscribe from the newsletter. Once you cancel your subscription to the newsletter, the data shall be deleted from our servers as well as those of MailChimp. This shall not affect data we have been archiving for other purposes.
For more details, please refer to MailChimp’s privacy policy at: https://mailchimp.com/legal/terms/.

Conclusion of a data processing agreement
We have executed a so-called “Data Processing Agreement” with MailChimp, in which we oblige that MailChimp undertakes to protect the data of our customers and to refrain from sharing it with third parties. Terms and conditions of the Mailchimp Data Processing Addendum: https://mailchimp.com/legal/data-processing-addendum/.

Hubspot (starting 1st April 2023)

Our newsletter is sent using “HubSpot”, 25 First Street, 2nd Floor, Cambridge, MA 02141, United States, a newsletter delivery platform.
Your personal data is stored on HubSpot’s servers. HubSpot uses this information to send and evaluate the newsletter on our behalf. Furthermore, according to its own information, HubSpot may use this data to optimise or improve its own services, e.g. to technically optimise the dispatch and display of the newsletters or for economic purposes in order to determine which countries the recipients come from. However, HubSpot does not use the data of our newsletter recipients to address them itself or to pass them on to third parties.
The newsletters also contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from the server of the dispatch service provider when the newsletter is opened. Within the scope of this retrieval, technical information such as information on the browser and your system, as well as your IP address and the time of the retrieval are initially collected. This information is used for the technical improvement of the services on the basis of the technical data or the target groups and their reading behaviour on the basis of their retrieval locations (which can be determined with the help of the IP address) or the access times.
Statistical surveys also include determining whether newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our intention nor that of the dispatch service provider to observe individual users. The analyses serve us much more to recognise the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users. The use of the dispatch service provider, the performance of the statistical surveys and analyses as well as the logging of the registration process are based on our legitimate interests in accordance with Art. 6 Para. 1 lit. f DSGVO.
Our interest is directed towards the use of a user-friendly and secure newsletter system that serves our business interests and meets the expectations of the users. Further information can be found in HubSpot’s privacy policy.

7. Plug-ins and Tools

YouTube with expanded data protection integration

Our website uses plugins of the website YouTube. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in the expanded data protection mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch the video. Nevertheless, this does not necessarily mean that the sharing of data with YouTube partners can be ruled out as a result of the expanded data protection mode. For instance, regardless of whether you are watching a video, YouTube will always establish a connection with the Google DoubleClick network.
As soon as you start to play a YouTube video on our website, a connection to YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited. If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.
Furthermore, after you have started to play a video, YouTube will be able to place various cookies on your device. With the assistance of these cookies, YouTube will be able to obtain information about our website visitor. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud. These cookies will stay on your device until you delete them.
Under certain circumstances, additional data processing transactions may be triggered after you have started to play a YouTube video, which are beyond our control.
The use of YouTube is based on our interest in presenting our online content in an appealing manner. This constitutes a legitimate interest as defined in Art. 6 Sect. 1 lit. f GDPR.
For more information about privacy at YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=en.

OpenStreetMap

We use the map service of OpenStreetMap (OSM). The provider is the Open-Street-Map Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.

When you visit a website on which OpenStreetMap is integrated, your IP address and other information about your behaviour on this website is forwarded to the OSMF. OpenStreetMap may store cookies in your browser for this purpose. These are text files that are stored on your computer and enable an analysis of your use of the website. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

Furthermore, your location may be recorded if you have allowed this in your device settings – e.g. on your mobile phone. The provider of this site has no influence on this data transmission. For details, please refer to the OpenStreetMap privacy policy at the following link: https://wiki.openstreetmap.org/wiki/Privacy_Policy.

The use of OpenStreetMap is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO.

wscaduniverse GO – browser extension

The browser extension from wscaduniverse.com optimizes your search on any website. A marked text can be directly transferred to the wscaduniverse.com search and the results displayed. No more copy and paste is needed. The text and web page are stored on a user-specific basis. The extension is available for various browsers.

Cookie consent with Usercentrics

This website uses the cookie consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your terminal device or to the use of certain technologies and to document this in accordance with data protection law. The provider of this technology is Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, website: https://usercentrics.com/de/ (hereinafter “Usercentrics”).

When you enter our website, the following personal data is transferred to Usercentrics:

Your consent(s) or revocation of your consent(s)
Your IP address
Information about your browser
Information about your terminal device
Time of your visit to the website
Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign the consent granted to you or its revocation. The data collected in this way is stored until you request us to delete it, delete the Usercentrics cookie yourself or until the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.

The use of Usercentrics is done to obtain legally required consents for the use of certain technologies. The legal basis for this is Art. 6 para. 1 sentence 1 letter c of the GDPR.

8. Own services

Applications

We offer you the opportunity to apply to us (e.g. by e-mail, post or via online application form). In the following, we inform you about the scope, purpose and use of your personal data collected during the application process. We assure that the collection, processing and use of your data will be in accordance with applicable data protection law and all other legal provisions and that your data will be treated in strict confidence.

Scope and purpose of data collection
When you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes taken during interviews, etc.) to the extent necessary to decide whether to establish an employment relationship. The legal basis for this is Article 26 of the new BDSG under German law (initiation of an employment relationship), Article 6 Paragraph 1 letter b of the GDPR (general contract initiation) and – if you have given your consent – Article 6 Paragraph 1 letter a of the GDPR. The consent can be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in processing your application.
If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of Article 26 of the new BDSG and Article 6 Paragraph 1 letter b of the GDPR for the purpose of implementing the employment relationship.

Storage period of the data
If we are unable to make you a job offer, you reject a job offer, withdraw your application, revoke your consent to data processing or request us to delete the data, the data you have provided, including any remaining physical application documents, will be stored or retained (retention period) for a maximum of 6 months after completion of the application process in order to be able to trace the details of the application process in the event of discrepancies (Art. 6 para. 1 letter f of the GDPR).
YOU CAN OBJECT TO THIS STORAGE IF YOU HAVE LEGITIMATE INTERESTS THAT OUTWEIGH OUR INTERESTS.
After expiration of the retention period, the data will be deleted, unless there is a legal obligation to retain the data or another legal reason for further storage. If it is apparent that it will be necessary to retain your data after the retention period has expired (e.g. due to an impending or pending legal dispute), the data will not be deleted until it has become irrelevant. Other statutory storage obligations remain unaffected.

Accounting

We use the services of DATEV on the basis of Article 28 of the GDPR for the processing of our accounting. This may involve financial and master data.

9. Commercial and business services

We process data of our contractual and business partners, e.g. customers and interested parties (collectively referred to as “contractual partners”) in the context of contractual and comparable legal relationships as well as related measures and in the context of communication with contractual partners (or pre-contractual), e.g. to answer inquiries.
We process this data to fulfill our contractual obligations, to safeguard our rights and for the purposes of the administrative tasks associated with this information as well as for business organization. Within the framework of applicable law, we only disclose the data of the contractual partners to third parties to the extent that this is necessary for the aforementioned purposes or for the fulfillment of legal obligations or with the consent of the persons concerned (e.g. to participating telecommunications, transport and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities). The contractual partners will be informed about further forms of processing, e.g. for marketing purposes, within the scope of this data protection declaration.
We inform the contractual partners which data are required for the aforementioned purposes before or in the course of data collection, e.g. in online forms, by means of special marking (e.g. colors) or symbols (e.g. asterisks or similar), or in person.
We delete the data after the expiry of legal warranty and comparable obligations, i.e., generally after 4 years, unless the data is stored in a customer account, e.g., as long as it must be retained for legal archiving reasons (e.g., for tax purposes generally for 10 years). We delete data disclosed to us by the contractual partner within the scope of an order in accordance with the specifications of the order, in principle after the end of the order.
Insofar as we use third-party providers or platforms to provide our services, the terms and conditions and data protection notices of the respective third-party providers or platforms shall apply in the relationship between the users and the providers.

Customer account

Contractual partners can create an account within our online offer (e.g. customer or user account, in short “customer account”). If registration of a customer account is required, contractual partners will be informed of this as well as of the information required for registration. Customer accounts are not public and cannot be indexed by search engines. Within the scope of registration and subsequent logins and uses of the customer account, we store the IP addresses of the customers along with the access times in order to be able to prove registration and prevent any misuse of the customer account.
If customers have terminated their customer account, the data concerning the customer account will be deleted, unless their retention is required for legal reasons. It is the responsibility of customers to back up their data when the customer account is terminated.

Online-Shop and e-commerce

We process the data of our customers to enable them to select, purchase or order the selected products, goods and related services, as well as their payment and delivery or execution. If necessary for the execution of an order, we use service providers, in particular postal, forwarding and shipping companies, to carry out the delivery or execution to our customers. For the processing of payment transactions, we use the services of banks and payment service providers. The required information is identified as such in the context of the order or comparable purchase process and includes the information required for delivery or provision and billing, as well as contact information in order to be able to contact you.

Offer software and platform services

We process the data of our users, registered users and any test users (hereinafter uniformly referred to as “users”) in order to be able to provide them with our contractual services and on the basis of legitimate interests in order to ensure the security of our offer and to be able to develop it further. The required information is identified as such in the context of the order, purchase order or comparable contract conclusion and includes the information required for the provision of services and billing as well as contact information in order to be able to hold any consultations.

• Types of data processed: Inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact data (e.g. e-mail, telephone numbers), contract data (e.g. subject matter of contract, term, customer category), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
• Persons concerned: Interested parties, business and contractual partners, customers.
• Purposes of processing: Contractual performance and service, contact requests and communication, office and organizational procedures, managing and responding to requests, security measures.
• Legal bases: Contract performance and pre-contractual requests (Art. 6 para. 1 p. 1 letter b. of the GDPR), Legal obligation (Art. 6 para. 1 p. 1 letter c. of the GDPR), Legitimate interests (Art. 6 para. 1 p. 1 letter f. of the GDPR).

Payment service provider

In the context of contractual and other legal relationships, due to legal obligations or otherwise on the basis of our legitimate interests, we offer data subjects efficient and secure payment options and use other payment service providers in addition to banks and credit institutions for this purpose (collectively, “payment service providers”).
The data processed by the payment service providers includes inventory data, such as the name and address, bank data, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as the contract, total and recipient-related information. The information is necessary to carry out the transactions. However, the data entered is only processed by the payment service providers and stored with them. I.e., we do not receive any account or credit card related information, but only information with confirmation or negative information of the payment. Under certain circumstances, the data is transmitted to credit agencies by the payment service providers. The purpose of this transmission is to check identity and creditworthiness. In this regard, we refer to the terms and conditions and the data protection information of the payment service providers.
The terms and conditions and the data protection notices of the respective payment service providers, which can be accessed within the respective websites or transaction applications, shall apply to the payment transactions. We also refer to these for further information and assertion of revocation, information and other data subject rights.

• Types of data processed: Inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contract data (e.g. subject matter of contract, term, customer category), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
• Persons concerned: Customers, prospects.
• Purposes of processing: Contractual benefits and service.
• Legal bases: Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 p. 1 letter b. of the GDPR), Legitimate Interests (Art. 6 para. 1 p. 1 letter f. of the GDPR).

Services used and service providers

Stripe: Payment services; service providers: Stripe, Inc, 510 Townsend Street, San Francisco, CA 94103, USA; Website: https://stripe.com/; Privacy Policy: https://stripe.com/privacy.

10. Consent to the use of data collected by WSCAD

When you use the WSCAD ELECTRIX, WSCAD SUITE, WSCAD SUITE Education, WSCAD Elektrohandwerk (Electrical Trade), hereinafter referred to as WSCAD Software, and the electrical CAD data portal wscaduniverse.com, you entrust us with your data. We therefore ask you to agree to the use of your data as described below. In the following, we will explain to you what data we collect, for what purposes we collect this data and what we do with the collected data. Please take the time to read this explanation carefully.

I. Information collected

We collect information for the purpose of improving our software and providing better services to our users and partners. All data is transmitted in encrypted form.

a. wscaduniverse.com

To use the electrical CAD data portal wscaduniverse.com, you must first create a WSCAD account. For this we need your personal data, e.g., your name, email address, and phone number. During the use of the electrical CAD data portal wscaduniverse.com, we collect the following information:

• Number of used parts
• Part numbers of the parts used
• Part name and manufacturer of the used part
• Search query
• Time and date of download
• Shopping cart history
• Your user name
• Your WSCAD software serial number
• Your user ID
• Your email address

b. WSCAD software

When you join the WSCAD Improvement Program, you help us to adapt the WSCAD software better according to your needs. For this we collect the following information:

• Device-specific information
• Version of the operating system
• Used Internet browser
• Number of monitors
• Resolution of the monitors
• Type of processor
• Number of CPU cores
• Software architecture (32 or 64 bit)
• Office version
• Office version architecture (32 or 64 bit)

Usage-specific information

• Your WSCAD serial number
• Version of the WSCAD software
• Number, type and scope of parts downloaded from the electrical CAD data portal wscaduniverse.com
• WSCAD discipline used (e.g. EE, CE, BA etc.)
• Used software modules and functions

If a program crash occurs while using the WSCAD software, you have the option to send us an error report. This report will help us avoid such events in the future and further improve the quality of the WSCAD software.

System-related data reported in the case of errors

• Data about device events such as crashes, system activity, hardware settings, browser type, browser language, date and time, and referral URL.
• Cookies that uniquely identify your browser or WSCAD account.

AI functionalities

Insofar as we offer products, functionalities or other services based on artificial intelligence (e.g., the ‘AI Copilot’ chatbot developed using generative artificial intelligence with a focus on security), hereinafter referred to as ‘AI’, the following additional terms apply. To use the AI, it is necessary for the data you input to be processed by the AI. Furthermore, we use the inputted data in anonymised form to improve the AI (e.g., to train our AI models), our products/services, and the related user experience. As the foundation of our AI, we use an interface provided by OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (OpenAI). You are not permitted to use the AI with personal data. Additionally, you should refrain from using confidential information when interacting with the AI.

II. Use of the information collected

We use the data collected through our services to continually improve our software applications and to improve our support services. We also use this information to provide you with customized content (e.g., advertising).
We use the data on the number, type and scope of parts downloaded from the electrical CAD data portal wscaduniverse.com to provide the manufacturers registered at the portal with on-demand reports on the use of their parts so they can offer you customized content (e.g., advertising). For this, we provide the information collected under point 1) a., in whole or in part, to the aforementioned recipients as required.
Your consent is required for the collection and use of your personal information discussed above (including its dissemination to the manufacturers registered at the electrical CAD data portal wscaduniverse.com). You can view this information at any time at https://www.wscad.com/en/privacy-policy/.

11. The security of your data

The data you provide to WSCAD GmbH is protected by appropriate technical and organizational means with the aim of securing your data against accidental or intentional manipulation, loss, destruction, access by unauthorized persons or unauthorized disclosure to third parties. Our security measures are continuously monitored and improved in line with technological developments and organizational possibilities.