In the following, we would like to inform you about the collection, processing, and use of your personal data (“data processing”), in particular about:
- when and for which actions we process data
- which data we process for which reason
- who receives data
- about your rights regarding data processing by us.
I. Contact Details
Controller of the data processing in the meaning of the General Data Protection Regulation (GDPR) within the scope of this website is:
Acrolinx North America Inc.
1601 Trapelo Road, Suite 240
Waltham, MA 02451
+1 866 749 3700
We also have an appointed a data protection officer. You can reach them at: firstname.lastname@example.org.
II. General information on data processing
1. Scope of processing of personal data
We process personal data in order to contact you and to inform you about our offers and promotions. We only process your personal data if and insofar as this is necessary for a respective contact. You are not subject to any automated decision-making according to Article 22 GDPR.
2. Legal basis of processing of personal data
Generally, Art. 6 para. 1 f) DSGVO represents the legal basis for data processing, since we have a legitimate interest to inform you about our offers and campaigns.
Further legal bases for the processing of personal data are presented below.
|Reason for Data Processing||Legal basis in GDPR||Explanation|
|Performance of a contract or steps prior to entering into a contract||Art. 6 (1) b)||Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.|
|Consent||Art. 6 (1) a)||The data subject has given consent to the processing of their personal data for one or more specific purposes|
|Legal Obligation||Art. 6 (1) c)||Processing is necessary for compliance with a legal obligation to which the controller is subject;|
3. Sources and categories of personal data
We process freely accessible personal data, such as name, company, and contact information (address, e-mail address, telephone number, fax number, etc.).
4. Erasure and storage of data
We will delete your personal data as soon as the legal basis for its processing ceases to exist. In some cases, however, legal bases can also exist in parallel respectively, where a legal basis no longer exists, a new one can intervene, e.g. the obligation to store certain data in order to fulfill a legal obligation to store data.
III. Right to object and right to withdraw consent
If the data processing is based on your consent or our legitimate interest, you have the right to object to the processing or to withdraw your consent at any time. Your objection or withdrawal only has an effect for the future. Where the analytic cookies used offer their own technical options for deactivation, this is explained above. You may contact us at any time at email@example.com to exercise your right of objection or revocation. If you object to processing on the basis of our legitimate interest, we may nevertheless continue processing if we can prove compelling reasons worthy of protection that outweigh your interests, rights, and freedoms.
IV. Rights of data subjects
If your personal data is processed, you are a data subject within the meaning of Art. 4 para. 1 GDPR. As data subject, you have the following rights with regard to your personal data. To exercise these rights, please contact us using the contact details above.
Right of access by the data subject according to Art. 15 GDPR
You have a right of access concerning your personal data processed by us. This includes the mandatory information set out in Art. 15 GDPR.
Right to rectification according to Art. 16 GDPR
You have the right to request the immediate correction of inaccurate personal data and the completion of incomplete personal data.
Right to erasure according to Art. 17 GDPR
You have the right to request the erasure of your personal data if one of the grounds mentioned in Art. 17 GDPR applies; in particular, if there is no longer a legal basis for the processing.
Right to restriction of processing according to Art. 18 GDPR
You have the right to request the restriction of the processing of your personal data if one of the grounds mentioned in Art. 18 GDPR applies; in particular, at your request instead of deleting the data.
Right to data portability according to Art. 20 GDPR
You have the right to request all personal data stored by us about you in a structured, commonly used, and machine-readable format, or to transmit this data to another controller without obstruction by the controller to whom the personal data was made available.
Right to lodge a complaint with a supervisory authority according to Art. 77 GDPR
According to Art. 77 GDPR, you have the right to file a complaint with the supervisory authority responsible for you.
V. Recipients of data
Some of the processing of your personal data is also carried out by data processors. These are included exclusively on the basis of an agreement about the commissioned data processing in accordance with Art. 28 para. 3 GDPR.
VI. Data transfer to third countries
The personal data we collect from you through this website will to some extent be transferred to countries outside the European Economic Area.
In this case, we take appropriate contractual, technical, and organizational measures to ensure that your data is handled securely and that an appropriate level of protection, which meets the data protection requirements within the EU/European Economic Area, is guaranteed. An appropriate and adequate guarantee is the certification according to the EU-US Privacy Shield (https://www.privacyshield.gov/list).
Last updated: June 2018