The basis of effective data privacy protection is to provide comprehensive information about the collection, processing and use of your data (“data processing”). Therefore, we wish to inform you about:
- When and during which actions we process data
- What data we process and for what reasons
- Who receives the data
- What rights you have concerning our data processing
This Data Privacy Notice only governs the use of personal data on our website https://www.acrolinx.com , including the sub-pages. If you exit our website via a link, or visit us via a social media platform, this Data Privacy Notice no longer applies.
You can access, print, or download this Data Privacy Notice at any time at the address https://www.acrolinx.com/privacy-notice.
I. Contact information
The data controller for data processing, in relation to this website, within the meaning of the General Data Protection Regulation is:
Acrolinx North America Inc.
1601 Trapelo Road, Suite 240
Waltham, MA 02451
+1 866 749 3700
We have also appointed a Data Protection Officer. This person can be reached via: Dataprotection@acrolinx.com.
II. General provisions about data processing
1. Scope of the processing of personal data
The processing of various information is necessary in order to make the website available. In addition, the scope of the data processing will depend upon your use of the functionality of the website, for example, if you communicate with us via the contact form, or consent to the processing of data.
There is no obligation to make personal data available to us. However, where the availability of this data is technically essential in connection with your visit to our site, a refusal could mean that you cannot access and use our website.
As a visitor to our website, you are not subject to any automated decision making within the meaning of Article 22 GDPR.
2. Legal basis for the processing of personal data
The legal bases for the processing of personal data are set out below.
|Processing ground||Legal basis in the GDPR||Explanation|
|Fulfillment of a contract or carrying out pre-contractual measures||Art. 6, para. 1b)||Processing shall only occur to the extent that it is necessary to establish and fulfill the rights and duties under the contract. Unless specifically stipulated otherwise, we will only process data to this extent.|
|Legitimate interest||Art. 6, para. 1f)||Processing will occur to the extent that we have a legitimate interest and there is no overriding interest of the data subject. The specific interest is explained in this Data Privacy Notice in relation to the processing statement.|
|Consent||Art. 6, para. 1a)||Processing will occur to the extent that you have specifically agreed to the type and scope of the data processing. You can withdraw your consent at any time with future effect. However, any processing undertaken up to this point will not be affected.|
|Legal obligation||Art. 6, para. 1c)||Processing will occur to the extent that this is necessary to comply with a German or European legal obligation.|
3. Data erasure and duration of storage
We erase your personal data at the point at which the legal basis for its processing is no longer valid. However, sometimes legal bases may co-exist or, when one legal basis is no longer valid, a new one may arise, such as the requirement to store certain data to comply with a statutory retention requirement.
III. Data processing to make the website available
In order for us to provide you with the website, it is necessary to process certain information. This already happens when you visit our website. In addition, our website offers various functionalities, which make it necessary to continue processing personal data.
1. Log files
When you contact our website, your browser sends various information to our servers. We need this to establish and maintain the connection. This data also includes your IP address, which we treat as personal data. In addition, the following data is collected:
- Date and time of access
- Source/evidence from which you reach the site
- Browser used
- Operating system used
- Referrer (previous site)
- Connection site (next site)
- IP address
We save this data in so-called server protocol files (log files). This data is not saved in connection with other data about you. The storage of log files, including your IP address, is necessary for our legitimate interest in making our website available and preventing its misuse. Log files that are saved will be erased after 30 days at most, unless longer storage is necessary. For example, to avert or resolve an attack on our website.
2. Technically necessary cookies
The use of technically necessary cookies and the associated data processing occur on the basis of our legitimate interest in enabling technically fault-free and comfortable use of our website. Technically necessary cookies will normally be automatically erased when your browser is closed (session cookies). in other cases, this will be after some time (persistent cookies). The storage period for persistent cookies is determined by the provider and can be viewed by you, for example, in your browser.
3. Contact form
You can send us a query at any time via the contact form on our website. This will request the following information:
- First name
- Email address
These entries are marked as mandatory fields. Any additional data that you transfer to us in the course of the query, including via the free text field, is provided voluntarily.
We will only use this data for responding to your query and communications linked to this. The legal basis for this processing of your data depends upon the content of your query. Generally, our legitimate interest in making available the contact functionality and responding to your query will apply in this situation. If your query relates to the conclusion of a contract with us, the processing will be on the basis of this pre-contractual obligation.
Your data will be erased once your query has been answered in full. Where we enter into a contract, if necessary, we will continue to process the data for the purposes of the contract.
4. Google Maps
We use the mapping service Google Maps (API) from Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) on our website, in order to show our location.
If you visit the sub-page on which the Google Maps map is integrated, our website sends various information, including your IP address, to Google in the USA, where is will be stored on their servers. If you have a user account with Google and are logged in at the time of visiting our website, the data will be directly assigned to your account. However, even without a user account, Google will create a use profile about you. This occurs irrespective of whether Google makes a user account available that you have logged in to, or whether no user account exists.
Our transfer of data to Google forms part of our legitimate interest in offering you the map function from Google Maps on our website.
Further information about Google and the operation of Google Maps can be found here:
- Conditions of use from Google: http://www.google.de/intl/de/policies/terms/regional.html
- Conditions of use for Google Maps: https://www.google.com/intl/de_US/help/terms_maps.html
If you decide to subscribe to our newsletter, the following data entered by you into the input box that is technically necessary for the application will be transferred to us:
- Email address
- IP address of the contacting computer
- Date and time of the application
For newsletter applications, we use the so-called “Double Opt-In” Procedure. This means that, following your application, an email will be sent to the email address provided, which contains a confirmation link to receive the newsletter.
The legal basis for processing your data to send the newsletter is the provision of consent pursuant to Art. 6, para. 1A) GDPR.
Our newsletter keeps interested parties updated at regular intervals about current offers and insights for Content Professionals, as well as new features, and tips and tricks for the Acrolinx platform. The data provided by you for this purpose is only processed to provide you with the newsletter. The additional data that is necessary for the application is only obtained to avoid misuse of the newsletter offer and, in particular, of your email address.
The data required for sending the newsletter will be stored for the duration of your subscription to the newsletter. You may withdraw your consent to receive the newsletter at any time. You can withdraw via the link provided in each newsletter or by sending a message to Responses@acrolinx.com
6. Google Fonts
We use web fonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Google is certified for this for the “Privacy Shield” (https://www.privacyshield.gov/), which is intended to ensure compliance with the data protection level applicable in the EU.
When you call up a page, your browser loads the required web fonts into your browser to display texts and fonts correctly. To do this, your browser connects to Google, which tells Google that our websites have been accessed via your IP address.
The use of Google Fonts is in the interest of a uniform and appealing representation of our web pages. If your browser does not support Google Fonts or Web Fonts, your device uses a default font.
The legal basis for the processing of personal data using Google Fonts is Art. 6 para. 1 lit. f DSGVO (legitimate interest).
IV. Use analysis and tracking
We want to continue to improve the usability of the website as well as the attractiveness of our services. For this reason, we also collect data concerning usage behaviors when you visit our website, which we evaluate for this purpose. Therefore, tracking and analysis cookies are also used on our website, as well as the technically necessary cookies described above.
1. Google Analytics
This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google gathers information about your use of the website (including your IP address) through a cookie in the USA and stores the information. However, we always use Google Analytics with an anonymization function, in which your IP address will be truncated in advance by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. The full IP address will only be transferred to Google in the USA and truncated there in exceptional circumstances. Google analyzes the data gathered and transfers reports to us about the use activities on our website and also provides further services to us for this purpose. The IP address provided by your browser, within the scope of Google Analytics, will not be consolidated with other Google data.
As well as blocking all cookies through your browser, you can prevent the processing of your data by Google, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link, in order to set an Opt-Out cookie, which will avoid the future gathering of information by Google Analytics within this website (this Opt-Out cookie only functions in this browser and only for this domain, if you erase your cookies in this browser, you need to click the link again): [deactivate Google Analytics].
You can find further information about Google Analytics in the Google Privacy Notice:
We also use tracking cookies from the Pardot service of salesforce.com Inc. The Landmark @ One Market, Suite 300, San Francisco, CA 94105, USA (“salesforce”) on our website. Salesforce saves the cookies in your browser, in order to analyze your use of our website. No personal data is collected, only a personalized identifier.
4. Crazy Egg
Crazy Egg collects information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where they have come from, and the pages they visited.
- User preference storage
- A/B performance testing
- Usage pattern assessment and traffic analysis
- Advertisement performance assessment
Cookies placed by Crazy Egg do not include personally identifiable information such as name, phone number, e-mail, or mailing address.
5. LinkedIn Analytics
6. LinkedIn Ads
To display adverts on the Acrolinx.com website, we use a service called DoubleClick.
9. Google AdWords
10. Google Tag Manager
Beeswax provides connectivity to Acrolinx to connect with some websites providing traffic in open exchanges. To improve campaign performances, anonymous information is provided to Beeswax under the form of pixels. A pixel is a 1×1 transparent image that conveys information from one system to another. This information does not contain any other data than segment lists used for targeting.
In the other direction, Beeswax provides Pixel media with industry standard data such as your anonymized IP address, approximate location, browser, etc.. A complete list of information that may be transferred can be found here: https://www.beeswax.com/privacy.html
V. Option to object and to remove
Where data processing is based upon your consent, or our legitimate interest, you have the right at any time to object to the processing or to withdraw your consent. Your objection or withdrawal will only have effect for the future. Where the analysis cookies have their own technical means of deactivation, this is set out in the relevant place. You can contact firstname.lastname@example.org at any time to exercise your right to object or withdraw. If you object to processing based upon our legitimate interest, we may only continue to process the data if we can demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms.
VI. Rights of data subjects
If your personal data is processed, you are a data subject within the meaning of Art. 4, para. 1 GDPR. As a data subject, you have the following rights in relation to your personal data. You can contact us via the contact information provided above in order to exercise these rights.
Right to information pursuant to Art. 15 GDPR
You have the right to information about the personal data that we process about you. This includes the mandatory information set out in Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
You have the right to prompt correction of false personal data and the completion of inaccurate data.
Right to erasure pursuant to Art. 17 GDPR
You have the right to request the erasure of your personal data, if one of the grounds set out in Art. 17 GDPR applies, in particular, where there is no longer a legal basis for the processing.
Right to restriction of processing pursuant to Art. 18 GDPR
You have the right to request the restriction of processing of your personal data, if one of the grounds set out in Art. 18 GDPR applies, in particular, where you desire this instead of erasure of the data.
Right to data portability pursuant to Art. 20 GDPR
You have the right to request all personal data stored by us about you in a structured, accessible, and machine-readable format, and for this data to be transferred to another data controller without hindrance from the controller to which the personal data has been provided.
Right to complain to the relevant authority pursuant to Art. 77 GDPR
Under Art. 77 GDPR you have the right to make a complaint to the relevant regulatory authority.
VII. Recipients of data
The processing of your personal data in connection with the website is also partly undertaken by sub-processors, in particular, those undertaking the hosting of the website and using analysis tools. This will only occur on the basis of a contractual agreement that contains the measures set out in Art. 28, para. 3 GDPR.
VIII. Data transfer to third countries
Personal data that we gather from you in relation to the website will be transferred to third countries outside the European Economic Area, under certain circumstances.
Where Google Analytics is used, it may be the case in the exceptional cases described above that your IP address may be transferred to Google LLC in full and truncated there.
Where the analysis tool Pardot from Salesforce is used, your IP address and other information will be transferred.
Google and Salesforce are located in the USA and are therefore in a so-called “third country” pursuant to Art. 44 GDPR. These businesses are certified under the Data Privacy treaty “EU-US Privacy Shield,” which guarantees adherence to a European data privacy protection standard.
Last updated: May 2018