Privacy

We are pleased about your visit on our website. Privacy is very important to us and we want you to feel secure while visiting our website.

You can therefore visit our website without disclosing your personal data. However, as soon as you make use of individual functions, services or offers on our website, personal data may be processed. We only collect, process and use personal data if you have consented to the collection, processing and use or a corresponding legal basis exists.

We reserve the right to change the data protection declaration at any time with effect for the future. The current version of the data protection declaration can be called up, saved and printed out at any time on our website.

Below we inform you in detail about the type, scope and purpose of the personal data collected, used and processed by us and inform you about the rights you are entitled to as the person concerned.

1. Name and address of the responsible entity

The responsible entity of iMetrify.com within the meaning of the GDPR (General Data Protection Regulation) and other national data protection laws of the member states as well as other data protection regulations:

BidX GmbH
Dolivostraße 35
64293 Darmstadt
Germany
datenschutz@bidx.xyz
+49 6151 1524060

2. Access data in server log files

Every time you visit our website, we automatically store access data in so-called server log files.

This includes the date and time of the retrieval, the used browser and its version, IP address and referrer URL (URL that you visited immediately before).

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to your device. To do this, your IP address must remain stored for the duration of the session.

The legal basis for the temporary storage of your data and log files is Art. 6 para. 1 lit. f DSGVO.

This data is evaluated exclusively to ensure the permanent and trouble-free operation of the website and to improve the content of our website as well as for transmission to law enforcement authorities in the event of a cyber attack and to ensure the security of our information technology systems. Your data will not be evaluated for marketing purposes in this context.

Our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f DSGVO also lies in these purposes.

The data of the server log files are stored separately from all other personal data provided by you.

The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of our website. Consequently, there is no possibility of objection.

3. Use of cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called "cookies" on our website. These are small text files that are stored on your device via a browser.

Many cookies contain a so-called cookie ID. It consists of a string of characters through which websites and servers can be assigned to a specific browser in which the respective cookie was stored. After the end of the browser session, most of the cookies we use are deleted ("session cookies"). The permanent cookies ("persistent cookies"), on the other hand, remain on your end device.

The following data is stored and transmitted in the cookies: Log-in information, use of website functions, session cookies with a session ID and a token.

Your data collected on our website will be pseudonymised by technical precautions. Therefore, it is no longer possible to assign the data to you. The data will not be stored together with other personal data of yours.

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f DSGVO.

The purpose of using technically necessary cookies is to simplify the use of our websites for you (e.g. we have saved your shopping cart). Some functions of our website cannot be offered without the use of cookies. For this it is necessary that your browser is recognized even after a page change. If cookies are not accepted or deactivated, the functionality of our website may be restricted.

Analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies we learn how the website is used by you and can thus constantly optimize our offer.
For these purposes, our legitimate interest also lies in the processing of personal data in accordance with Art. 6 para. 1 lit. f DSGVO.

Some of the third-party services we include may use cookies. Please refer to the websites of the respective providers for information on the respective mode of operation and data processing. You can find the services we use in this data protection declaration.

Cookies are stored on your terminal and transmitted to our website. You therefore have control over the use of cookies. You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general or set so that the setting of cookies is prevented and thus permanently contradict the setting of cookies. You can also delete cookies that have already been set at any time via your browser. The transmission of Flash cookies cannot be prevented via the settings of your browser, but by changing the settings of the Flash Player. This also applies to all third party cookies listed below.

4. Data collection and use during registration

You have the possibility to register on our website. In this case, we collect the personal data that you voluntarily provide to us during your registration. Which data is collected can be seen from the respective input forms. During registration we collect your e-mail address. You must also create a password.

If you subscribe for a fee, we also need your name, your (company) address, the VAT ID and the company name. If you wish to use our services by linking your Amazon account to our service, we will also collect your Amazon ID.

Accordingly, the legal basis for the processing of your data is Art. 6 para. 1 lit. b DSGVO.

We use the data provided by you only for contract processing and provision of our services to be provided within the framework of the contract. We may also pass on your data to one or more contract processors (e.g. parcel service providers or payment service providers) who also use your data exclusively for internal use on our behalf.

We also store your IP address and the date and time of registration in order to prevent misuse of our website and the services offered on it and to investigate any criminal offences committed. The storage of this data is therefore necessary for our own protection. The legal basis for the processing of personal data is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f DSGVO also lies in the aforementioned purposes.

This data will not be passed on to third parties unless required to do so by law or for the purpose of criminal prosecution.

After complete processing of the contract or deletion of your account, your data will initially be blocked for further use and deleted after the legal retention periods have expired, unless you have expressly consented to further use of your data or we reserve the right to further use of data which is permitted by law and about which we inform you below.

5. Google Analytics

We use Google Analytics, a web analysis service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google Analytics"). The information generated about your use of this website is usually transferred to a Google server in the USA and stored there. The USA is an unsafe third country. However, Google Inc. has voluntarily certified itself under the US-EU data protection agreement "Privacy Shield" and has thus committed itself to comply with EU data protection regulations.

The legal basis for the processing of personal data is Art. 6 para. 1 lit. f DSGVO.

Google Analytics uses methods that enable an analysis of your use of the website, in particular from which website you came to our website (so-called referrer), which subpage you access or how often and for how long you view a subpage. Google Analytics uses cookies for this purpose. Every time you visit a page of our website on which Google Analytics is integrated, your browser on your device is automatically prompted to transmit data to Google Analytics for the purpose of analysis.

By activating IP anonymization on our website, the IP address is reduced prior to transmission within the member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymous IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Google will use this information on our behalf to evaluate the use of our website by users, to compile reports on the activities within this website and to provide us with further services associated with the use of this website and the Internet.

Our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f DSGVO also lies in these purposes.

Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. Pseudonymous user profiles can be created from the processed data.

You can prevent Google from collecting the data generated by the cookie and relating to your use of our website (including your IP address) and from processing this data by Google by downloading and installing the browser add-on available under this link http://tools.google.com/dlpage/gaoptout?hl=en. The installation of the browser add-on is considered a contradiction by Google.

As an alternative to the browser plug-in or within browsers on mobile devices, please click this link link object to the collection and use of your data by Google Analytics with effect for the future. An opt-out cookie is stored on your mobile device. If you delete your cookies, you must click the link again.

The terms of use and privacy policy of Google and Google Analytics can be found here https://www.google.de/intl/de/policies/privacy/ and here http://www.google.com/analytics/terms/de.html.

6. Integration of YouTube

We include videos from the social network youtube.com, which is operated by YouTube, LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA ("YouTube"). YouTube LLC is a subsidiary of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.

When you visit our website, a direct connection to YouTube‘s servers is established via your browser. Your browser is automatically prompted by the video embedded on our website to download a representation of the corresponding component from YouTube. As part of this technical process, YouTube is informed about which specific subpage of our website you are visiting.

If you use the videos, the corresponding information - e.g. by pressing the play button - is transmitted from your browser to YouTube, if necessary linked to your user account and saved.

The legal basis for the use of your data is Art. 6 para. 1 lit. f DSGVO.

Our legitimate interest in data processing pursuant to Art. 6 (1) (f) DSGVO lies in the optimisation and economic operation of our website.

If you are logged in with your personal Google Account while visiting our site, YouTube may associate your account with your visit and the pages of our site that you have specifically visited.

If you don‘t have a Google Account, YouTube may still store your IP address.

If you do not want such processing, you must log out of your Google Account and delete your cookies before visiting our site.

You can object to the use of your data by Google at any time by clicking on the following link: https://adssettings.google.com/authenticated.

For further information on data protection, please refer to YouTube‘s privacy policy https://www.google.de/intl/de/policies/privacy/.

7. Newsletter and newsletter analysis by mailchimp

You can register to receive our newsletter. To send our newsletter we use the newsletter mailing service MailChimp, which is operated by the Rocket Science Group, LLC, 675 Ponce De Leon Ave NE 5000, Atlanta, GA 30308, USA ("Mailchimp"). We transmit data to MailChimp in the USA as described below. The USA is an unsafe third country. However, MailChimp has voluntarily certified itself under the US-EU data protection agreement "Privacy Shield" and has thus committed itself to comply with EU data protection regulations.

Our newsletter is published regularly and contains information about product updates, news, offers, insights and interesting facts.

To register, you must provide us your email address. You may voluntarily provide us with additional information, such as your name. The registration takes place in a so-called double opt-in procedure. After registering on our website, you will receive a confirmation email from us in which you must confirm your registration once again. This entire process is documented and stored. This includes the storage of the time of registration and confirmation as well as your IP address. The collection of this data is necessary so that we can trace the processes in the event of misuse of the e-mail address and therefore serves our legal protection. By subscribing to our newsletter, you agree to receive it.

The legal basis for the processing of your data after registration for the newsletter is Art. 6 para. 1 lit. a DSGVO if you have given your consent.

Your data will be stored on the servers of MailChimp in the USA. MailChimp uses this information for sending and evaluating the newsletter. The evaluation takes place on our behalf, but MailChimp can also use the data for quality assurance and quality improvement of its own service.

The "web-beacon" contained in the newsletter is retrieved from the MailChimp server when the newsletter is opened. Information about the browser, your system, your IP address and the time of retrieval is collected as part of this retrieval. In addition, information is collected as to whether the newsletter is opened, when it is opened and which links are clicked. For technical reasons, this information can be assigned to you as the recipient. However, it is not our intention to observe you as an individual user. The evaluations serve us much more to recognize the reading habits of our users in principle and to adapt our contents to all users or to send different contents according to the interests of our users.

You can revoke your consent to the storage and use of your personal data to receive the newsletter and the statistical survey described above at any time with effect for the future. For the purpose of revoking your consent, you can use the link provided for this purpose in the newsletter or inform us of your revocation by e-mail to the following address: newsletter@bidx.xyz.

Your data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Your e-mail address will therefore be stored for as long as the subscription to the newsletter is active.

Further information on data protection can be found in the data protection regulations https://mailchimp.com/legal/privacy/ of MailChimp.

8. Email

Due to legal regulations, our website contains information that enables us to be contacted electronically and to communicate directly with you. This includes above all our email address. As far as you contact us by email, the personal data transmitted by you are automatically stored.

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f DSGVO. If the establishment of contact is aimed at the conclusion of a contract, then additional legal basis for the processing is Art. 6 exp. 1 lit. b DSGVO.

However, we use the personal data transmitted by you exclusively for the processing of your concrete inquiry. The data provided will always be treated confidentially.

Your data can be stored in a customer relationship management system (CRM system) or another organization tool for customer data.

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data sent by e-mail, this is the case when the conversation with you has ended. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been finally clarified.

You have the possibility to revoke your consent to the processing of your personal data at any time. If you contact us, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.

9. Zendesk

We use the Zendesk ticket system, a customer service platform of Zendesk Inc. 989 Market Street 300, San Francisco, CA 94102 ("Zendesk") to process customer inquiries. We transfer the following personal data to Zendesk in the USA. The USA is a so-called unsafe third country. However, Zendesk has voluntarily obtained certification under the US-EU Privacy Shield Agreement.

If you contact us via e-mail via our support, necessary data such as surname, first name, e-mail address will be collected via our website in order to be able to answer your enquiry. By contacting us through support, you consent to the processing of your personal data by Zendesk.

If you have given your consent, the legal basis for the processing of your data is Art. 6 para. 1 lit. a DSGVO.

For further information on data protection, please refer to Zendesk‘s data protection declaration http://www.zendesk.com/company/privacy If you have any questions, you can also contact Zendesk‘s data protection officer directly: privacy@zendesk.com.

10. Crisp Chat

We use the Crisp chat system, a service of Crisp IM SARL, 149 Rue Pierre Semard, 29200 Brest, France ("Crisp"), to process customer enquiries.

When you contact us via our chat, necessary data such as e-mail address, telephone number, the content of your messages, your last activity and its time will be collected via our website in order to answer your request. By contacting us through the chat, you consent to Crisp processing your personal data.

Crisp may link your data with other publicly available data, e.g. from social networks such as first and last name, avatar and company.

If you have given your consent, the legal basis for the processing of your data is Art. 6 para. 1 lit. a DSGVO.

For further information on data protection, please refer to Crisp‘s declaration on the implementation of the basic data protection regulation https://help.crisp.chat/en/article/whats-crisp-eu-gdpr-compliance-status-nhv54c/ If you have any questions, you can also contact Crisp‘s data protection officer directly:

Valerian Saliou
Email: valerian@crisp.chat
Phone: +33630138382
Address: 149 rue Pierre Sémard, 29200 Brest, France

11. Commentary

You have the opportunity to leave comments on our website. To do this, select a (user) name under which the comment will be published. This (user) name is visible to all users of our website. You must also provide your email address. By commenting on our website you agree that we store and process your (user) name, comment, your IP address and the time of sending the comment.

If you have given your consent, the legal basis for the processing of your data is Art. 6 para. 1 lit. a DSGVO.

In addition, for security reasons, it is necessary to store your IP address and the time of sending the comment in case your comment infringes the rights of third parties or contains illegal content. Our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f DSGVO also lies in these purposes.

The storage of this data is therefore in our own interest, so that we can exculpate ourselves in the event of a violation of the law. We do not disclose this data to third parties unless such disclosure is required by law or serves our legal defense.

12. Data security

We protect our website and other systems through numerous technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. Despite regular checks, however, complete protection against all risks is not possible and cannot be provided by us. For this reason, you are free to transmit your personal data to us at any time by other means, for example by telephone or by post.

13. Legal basis for the processing of personal data

Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a DSGVO serves as the legal basis for the processing of personal data.

In the processing of personal data required for the performance of a contract to which you are a party, Art. 6 para. 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis.

In the event that your vital interests or the vital interests of another natural person make processing of personal data necessary, Art. 6 para. 1 lit. d DSGVO serves as the legal basis.

If processing is necessary to protect a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not outweigh the former interest, Art. 6 para. 1 letter f DSGVO serves as the legal basis for processing.

14. Legitimate interests in the processing

If the processing of your personal data is based on Article 6 I lit. f DS-GMO, it is in our legitimate interest, unless otherwise stated, to carry out our business activities. In all other respects, we have stated our purposes and interests within the scope of the above list of processing.

15. Data erasure and storage time

Your personal data will be deleted or blocked as soon as the purpose of storage ceases to apply or you revoke your consent. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject. If the purpose of storage ceases to apply, you revoke your consent or if a storage period prescribed by the European Directive and Regulation Giver or another competent legislator expires, the personal data will be blocked or deleted routinely and in accordance with the statutory provisions, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

16. The right to get information

You also have the right to receive free information from us at any time about your personal data stored and a copy of this information. You also have a right of access to the following information:

• the processing purposes,
• the categories of personal data being processed,
• the recipients or categories of recipients to whom the personal data have been or are still being disclosed, in particular recipients in third countries or international organisations,
• if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration,
• the existence of a right of rectification or deletion of personal data concerning him or of a restriction on processing by the controller or of a right of opposition to such processing,
• the existence of a right of appeal to a supervisory authority,
• if the personal data are not collected from the data subject: all available information on the origin of the data and,
• the existence of automated decision-making, including profiling in accordance with Article 22(1) and (4) DS-GMO, and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

You also have a right of access to information on whether personal data has been transferred to a third country or to an international organisation. If this is the case, you also have the right to obtain information about the appropriate guarantees in connection with the transmission.

17. Right to correction

You have the right to request the immediate correction and/or completion of incorrect or incomplete personal data concerning you. We must make the correction without delay.

18. Right to the limitation of processing

You have the right to request us to restrict processing if one of the following conditions is met:

• The accuracy of the personal data is disputed by the data subject for a period that enables the data controller to verify the accuracy of the personal data.
• The processing is unlawful, the data subject refuses to delete the personal data and instead requests that the use of the personal data be restricted.
• The data controller no longer needs the personal data for the purposes of the processing, but the data subject needs them to assert, exercise or defend legal claims.
• The data subject has lodged an objection to the processing pursuant to Art. 21 para. 1 DS-GMO and it has not yet been determined whether the legitimate reasons of the data subject outweigh those of the data subject.

If the processing of personal data concerning you has been restricted, such data may only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.

If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.

19. Right to cancellation

You have the right to demand that we delete your personal data immediately, provided that one of the following reasons applies and insofar as the processing is not necessary:

• The personal data have been collected or otherwise processed for such purposes for which they are no longer necessary.
• The data subject withdraws his/her consent on which the processing was based pursuant to Article 6(1)(a) DS-GMO or Article 9(2)(a) DS-GMO, and there is no other legal basis for the processing.
• The data subject objects to processing under Article 21(1) DS-GMO and there are no overriding legitimate grounds for processing or the data subject objects to processing under Article 21(2) DS-GMO.
• The personal data have been processed unlawfully.
• The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.
• The personal data was collected in relation to information society services offered in accordance with Art. 8 para. 1 DS-GMO.

If the personal data have been made public by us and we as data controllers are obliged to delete the personal data pursuant to Art. 17 para. 1 DS-GMO, we shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers who process the published personal data, that the data subject has requested the deletion of all links to this personal data or of copies or replications of this personal data from these other data controllers, insofar as the processing is not necessary.

The right to cancellation does not exist if the processing is necessary:

• to exercise freedom of expression and information;
• for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the controller is subject or for the performance of a task in the public interest or in the exercise of official authority conferred on the controller;
• for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 DSGVO;
• for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 DSGVO, insofar as the law referred to under a) is likely to render impossible or seriously impair the attainment of the objectives of such processing, or
• to assert, exercise or defend legal claims.

20. Right to information

If you have exercised your right of rectification, deletion or restriction of processing against us, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right vis-à-vis us to be informed about these recipients.

21. Right to Data Transferability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, common and machine-readable format. You also have the right to transmit this data to another person responsible without our interference, provided that the processing is based on the consent provided for in Article 6(1)(a) DS GMO or Article 9(2)(a) DS GMO or on a contract pursuant to Article 6(1)(b) DS GMO and the processing is carried out using automated procedures, provided that the processing is not necessary for the performance of a task in the public interest or in the exercise of public authority entrusted to us.

Furthermore, when exercising your right to data transferability pursuant to Art. 20 para. 1 DS-GMO, you have the right to obtain that the personal data be transferred directly by us to another person responsible, insofar as this is technically feasible and provided that the rights and freedoms of other persons are not affected by this.

The right to transferability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.

22. Right of objection

You have the right to object at any time to the processing of personal data concerning you on the basis of Article 6(1)(e) or (f) of the DS-GMO for reasons arising from your particular situation. This also applies to profiling based on these provisions.

We will no longer process personal data in the event of an objection, unless we can prove compelling reasons worthy of protection for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling insofar as it is connected with such direct advertising. If you object to our processing for direct advertising purposes, we will no longer process your personal data for these purposes.

You also have the right to object to the processing of your personal data concerning you, which is carried out by us for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 DS-GMO, for reasons arising from your particular situation, unless such processing is necessary to fulfil a task in the public interest.

You can contact us at any time to exercise your right of objection. You are also free to exercise your right of opposition in connection with the use of Information Society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

23. Right to revoke consent under data protection law

You have the right to revoke your consent to the processing of personal data at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.

24. The right to automated decisions in individual cases, including profiling

You have the right not to be subject to a decision based exclusively on automated processing - including profiling - which has legal effect against you or significantly affects you in a similar manner, provided that the decision.

• is not necessary for the conclusion or performance of a contract between you and us, or
• is admissible by law of the Union or of the Member States to which we are subject and that law contains appropriate measures to safeguard your rights, freedoms and legitimate interests or
• with your express consent.

Is the decision

• necessary for the conclusion or performance of a contract between you and us, or
• is done with your express consent,

we will take reasonable measures to protect your rights and freedoms and your legitimate interests, including at least the right to obtain an individual‘s intervention from us to state his or her own position and to challenge the decision.

25. Existence of automated decision making

We do not perform automatic decision making or profiling.

26. Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or suspect of infringement, if you believe that the processing of personal data concerning you is contrary to the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 DSGVO.

Last updated: May 2019