Privacy Notice

1. Name and Contact Details of the Data Controller and the Company Data Protection Officer

This privacy policy applies to data processing by:

Controller:

DOCUFY GmbH

Kirschäckerstraße 27

96052 Bamberg

Tel.: +49 951 20859-6

Fax: +49 951 20859-777

E-Mail: info@docufy.de

The external data protection officer is Andreas Bethke

Tel.: +49 4822 3663000

E-mail: a.bethke@b3-gruppe.de or datenschutz@docufy.de

2. Collection and storage of personal data; nature and purpose of their use

a) When visiting the website

When you visit our website, the browser used on your device automatically sends information to our website's server. This information is stored temporarily in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

IP address

Date and time of the request

Time zone difference to Greenwich Mean Time (GMT)

Content of the request (specific page)

Access status/HTTP status code

Amount of data transferred

Website from which the request comes

Browser type and version

Operating system and its interface

Language and version of the browser software

Name of the accessed website

Message about successful retrieval

We process the aforementioned data for the following purposes:

To ensure a smooth connection to the website,

ensuring a comfortable use of our website,

evaluation of system security and stability as well as

for further administrative purposes.

The legal basis for the data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes listed above for data collection. Under no circumstances do we use the collected data for the purpose of drawing conclusions about you.

Furthermore, we use cookies and analysis services when you visit our website. You can find more detailed explanations under points 5 and 6 of this data protection declaration.

3. Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

you have given your express consent to do so in accordance with Art. 6 (1) sentence 1 lit. a GDPR,

the disclosure is necessary in accordance with Art. 6 (1) sentence 1 lit. f GDPR to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,

in the event that there is a legal obligation to pass on the data in accordance with Art. 6 (1) sentence 1 lit. c GDPR, or

this is legally permissible and necessary for the performance of a contract with you in accordance with Art. 6 (1) sentence 1 lit. b GDPR.

4. Rights of data subjects

You have the right:

to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data if it has not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about the details;

pursuant to Art. 16 GDPR, to demand the immediate correction of incorrect or incomplete personal data stored by us;

to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete the data and we no longer require the data, but you require it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;

pursuant to Art. 20 GDPR, to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller;

pursuant to Art. 7 (3) GDPR, to withdraw your consent at any time. This has the consequence that we may no longer continue the data processing based on this consent in the future; and

to file a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

5. Right of objection

If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for doing so that arise from your particular situation or the objection is directed against direct mail. In the latter case, you have a general right of objection, which we will implement without you having to specify a particular situation.

If you wish to exercise your right of revocation or objection, simply send an e-mail to info@docufy.de or datenschutz@docufy.de.

6. data security

We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. This is usually a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

7. Timeliness and changes to this privacy policy

This data protection declaration is currently valid and was last updated in May 2018.

It may be necessary to amend this data protection declaration due to the further development of our website and offers on it or due to changes in legal or official requirements. You can access the current data protection declaration at any time on our website.