Privacy policy

We are pleased about your visit on our website and your interest in our products and services. Protecting your privacy is important to DriveConcepts. This privacy statement explains our practices regarding the collection, use and disclosure of your personal data, through the use of our website, products and services.

 
1. Controller

Controller within the meaning of the General Data Protection Regulation ("GDPR") is:

DriveConcepts GmbH ("We", "Us" or "Our")
Wettiner Platz 10
01067 Dresden
Germany
Phone:  +49 351 4858-0
Fax:  +49 351 4858-400
Email:  contact@driveconcepts.com

 
2. Data Protection Officer

If you have any questions, concerns or complaints regarding the application of this privacy policy or the exercise of your rights - as described under point 10 - you can contact our data protection officer. You can reach our data protection officer Ms. Bott at

DriveConcepts GmbH
-Managing Director-
Wettiner Platz 10
01067 Dresden
Germany
Email:  contact@driveconcepts.com

 
3. Collection and processing of your personal data
3.1 Performance of our business activity (contractual relationship)

We process personal data to entering into contracts, to perform or to complete contracts with customers and business partners. The performance of contractual obligations can include per example the offer preparation, the handling of an order, the provision of our products and services, the provision of customer support services or the improvement of our products and services. Therefor we collect a variety of information, which may include:

  • Master data: Full name, salutation and title, position and department
  • Contact data: Company name and address, phone number, fax, email address, homepage
  • Payment data: Account and credit card data
  • Contract data: Customer number, contract relationship, purchased products and services
  • Other data: Notes on authorizations, communication data, contact history
3.2 Legal authorization

In certain cases we are legally obligated to process personal data. Such legal obligations can occur from specific regulations of the national business, commercial, tax and social law as well as form the European legislation.

3.3 Advertising purposes

Personal data can be processed for advertising purposes or market and opinion research. For example after the purchase of MDESIGN we send information about similar products or services per email. Or we inform you about our latest software updates and upcoming events. You have the right to object this processing of your personal data at any time.

3.4 Contact

We process personal data for purposes of facilitating communication with you. This is per example the case if you fill in our contact form or if you contact us by email, by phone, by mail or by social media. When contacting us through one of the mentioned communications media we collect the following data:

  • the company name and address;
  • your first and family name as well as title;
  • your position and division;
  • your telephone number; 
  • your email address; and
  • content and type of your inquiry

We use this data to execute a business contract with our customers or to communicate with you and answer your inquiry. Legal basis for the processing is our legitimate interest.

3.5 Usage of our website
3.5.1 Access to our website

If you visit our website for mere information purposes, your web browser automatically transfers data to our web servers, whereby the data referred to in the following will be recorded during ongoing sessions:

  • IP address
  • directory protection log-in
  • data and time of the request
  • contents of the request (specific page)
  • logs
  • status code
  • the transferred data volume
  • website from which you were referred to our website (referrer URL)
  • user agent
  • accessed host name

In this context, IP addresses will be stored anonymously by deleting the last block of numbers, that is, 127.0.0.1 turns into 127.0.0.x; Ipv6 addresses will also be anonymized. The anonymized IP addresses will be stored for 60 days. Information about used directory protection log-ins will be anonymized after one day.

This data will be processed and stored to guarantee smooth connection establishment and comfortable website use, but also to identify disruptions and for security reasons.

3.5.2 Cookies

For the use our website, we place "cookies" on your computer. Cookies are small data fragments stored on your device (computer, laptop, tablet, smartphone) in the form of text files whenever you load websites in your browser. The following cookie categories will be loaded for our website:

  • Transient cookies: Transient cookies and/or temporary cookies will be automatically deleted at the end of your session (such as by closing your browser) and include, in particular, session cookies. They store the "session ID" with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognized if you return to our website.
  • Persistent cookies: Persistent cookies and/or function cookies remember all the selected user settings to improve the user experience for you. As an example, we use a function cookie to store your consent to cookie tracking. These cookies will be deleted only at the end of a defined period.

We use cookies to guarantee a consistent and efficient visiting experience and to enable fundamental website functions. By using the website, you agree to our use of cookies. You can change your browser settings according to your preferences and, for example, deactivate and/or delete cookies after you visited the website. Please note that you may not be able to use all the website functions if you decide to block cookies.

3.5.3 Analysis and advertising tools
i. Google Analytics

We use "Google Analytics" to analyze the visitor traffic and their behavior on our website and to continuously derive optimization measures for our website. Google Analytics is a web analysis service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, hereinafter referred to as "Google"). Google Analytics uses "cookies" to enable an analysis of the use of the website. Generally, information which these cookies generate (such as browser types and versions) will be transferred to servers based in the US and provided to us on an anonymous basis.

On this website, we have extended Google Analytics by the "anonymize_IP" code. This guarantees that your IP address will be masked, so that all data will be collected anonymously. Only in exceptional cases will complete IP addresses be transmitted to a US-based Google server and shortened there.

You can prevent your data from being collected and prevent Google from processing them. For this purpose, please download and install a browser plug-in available at the below link: https://tools.google.com/dlpage/gaoptout?hl=en.

ii. Google AdWords

For our internet presence, we use Google AdWords, including conversion tracking. Google AdWords is a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, hereinafter referred to as "Google").

We use AdWords conversion tracking to provide you with targeted advertisements for our products. If you click on a Google advertisement, the conversion tracking function places a cookie on your device. These "conversion cookies" lose their validity at the end of a 30-day period and, apart from that, they do not serve to identify you personally.

To the extent that the relevant cookie is still valid and you visit this website within a given period, we and Google can see that you clicked on one of our Google advertisements and that you were then referred to our internet presence.

Based on information which they obtained this way, Google prepares and provides us with statistics concerning the visits of our internet presence. Also, we receive information about the number of users who clicked on our advertisement(s) and about the pages of our internet presence which had subsequently been accessed. However, neither we nor third parties who also use Google AdWords will be enabled to identify you on the basis of this information.

By accordingly adjusting your web browser settings, you can also prevent or limit the installation of cookies and you can erase any cookies which have already been placed at any time. The required steps and measures, however, depend on the internet browser which you actually use for accessing the website. Therefore, please consult your internet browser "Help" function or documentation and/or contact the manufacturer and/or support if you have any questions in this regard.

iii. Google Web Fonts

For the uniform display of fonts, we use web fonts for this website provided by Google. Whenever you access the website, your browser will download the required web fonts into your browser cache in order to correctly display texts and fonts. For this purpose, your browser must establish a connection to the Google servers based in the United States. This way, Google is informed that our website was accessed via your IP address.

For further information on data processing by Google, please refer to https://policies.google.com/privacy?hl=en.

iiii. Use of reCAPTCHA

MDESIGN uses reCAPTCHA, an online service of the US company Google LLC, in some online offers. This service distinguishes whether an action (e.g. registration for a seminar offer) is carried out by a person or a computer program. The utility thus serves to protect MDESIGN from spam messages and automated malware. If Google reCAPTCHA is used in a country of the European Economic Area or in Switzerland, this service is provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, otherwise by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (in each case "Google"). The processed data may include the IP address of your end device and your location data. Google is solely responsible under data protection law for the collection and processing of data in connection with reCAPTCHA. Google's privacy policy is available at https://policies.google.com/privacy?hl=en

3.5.4 Subscription to the e-newsletter

On this website, you can subscribe to our newsletter offer free of charge to regularly receive information on new products, training offers and events as well as tips and tricks. For this purpose, we need to have your first and family name, title and email address. Any personal data collected in this context will be exclusively used to send newsletters to you - on the basis of your consent. We use the "double opt-in procedure" for the subscription. For this, we will send a message after your registration to the email address you have specified in which you will be asked to confirm your subscription. You may revoke this consent at any time with effect for the future, e.g. by clicking on the relevant "Unsubscribe" link which is included in each newsletter or by sending an email to privacy@mdesign.de.

3.5.5 Trial version

On our website, you can request a free-of-charge MDESIGN trial version. This trial version is provided either as a download or cloud solution via AWS AppStream 2.0. The trial version is valid for up to 14 days and begins on the day you install MDESIGN with temporary licenses or start the cloud solution. If you request the delivery of a test version, we collect information to identify you. This includes:

  • the company name
  • your first and family name as well as title
  • your address (post code and city /town)
  • your telephone number; and
  • your email address

We will use this information to provide you with the download link for our trial version and to remind you when the trial period is about to expire. If the cloud solution is provided via AWS AppStream 2.0, your first and last name and your email address will be integrated into our account at AppStream 2.0 from Amazon Web Services, Inc. as a user name. Your email address will also be used to send you the access data for this service. Registration for the free trial version is voluntary and you may decide, at any time, whether or not to revoke your consent.

You can find data protection notice from Amazon Web Services, Inc. (AWS) under the following link: https://aws.amazon.com/privacy/

3.5.6 Registration for customer and download portals

Some of our services require registration (such as MDESIGN Roloff/Matek edition). Any data required for registration will be collected during the registration process; this shall include, but not be limited to, your first and family name, title, email address and a password. We will store the requested data to manage your access to the relevant product for which you registered.

The MDESIGN customer forum is intended for customers who concluded a valid service agreement. In order to enable you to have access to the customer forum provided on our website, we process personal data (customer number and password); access data will be delivered by letter after purchasing MDESIGN.

3.5.7 Purchases

On our website, you can purchase certain products (MDESIGN student). Purchase orders will be processed by Verifone, an associated payment services provider. The following data will be collected for purchasing the products:

  • your first and family name;
  • your address (street, number, city/town, country)
  • your email address
  • the payment type and currency

This is not a group company, but rather a company with which we concluded contractual agreements. For more information on data processing by Verifone, please refer to https://www.2checkout.com/legal/privacy/.

3.5.8 Children

This online offer is not intended for children under the age of 16.

3.5.9 Third-Party links in the context of our website and services

Our and MDESIGN include many links referring to companies with which we maintain business relationships. Neither can we provide a guarantee for these external contents nor will we be responsible for them to comply with applicable data protection requirements. The providers or operators of linked websites shall be exclusively liable for the contents and data protection measures. You should exercise caution and check third parties' privacy policies for websites and services which you use.

 
4. Legal bases of the processing

We process personal data in compliance with the provisions under the European Union General Data Protection Regulation (GDPR) and with applicable national law. In concrete terms, our data processing activities are generally based on at least one of the four conditions below:

  • you have provided us with your consent for the processing of your personal data for one or more purposes (Art. 6 para. 1 letter a GDPR);
  • processing is required to fulfil a contract between us or to perform pre-contractual measures resulting from your enquiry (Art. 6 para. 1 letter b GDPR);
  • processing is required to fulfil legal obligations to which we are subject (such as the retention of documents for commercial and tax law purposes) (Art. 6 para. 1 letter c GDPR);
  • processing is required to protect our or a third party's legitimate interests (Art. 6 para. 1 letter f GDPR).

If necessary, the above bases of processing can be combined. If you fail to provide personal data which we require in relation to your request for a program trial version or a purchase, the relevant trial version will not be provided and the purchase process will not be completed.

 
5. Data disclosure

Our employees have access to your personal data if this is required for us to fulfil their tasks. Our partner companies (MDESIGN Vertriebs GmbH and TEDATA GmbH) have access to your personal data as well so that they, as an example, can render services on our behalf or so that we can fulfil customer management activities. In addition, your personal will be transferred to third parties who were commissioned with fulfilling certain tasks for us. This may include, without limitation, advertising agencies, printing companies or IT/payment/telecommunication service providers. Third parties with whom we cooperate and who have access to your personal data are subject to written data processing agreements which guarantee that the relevant data will be exclusively used for the above purposes.

 
6. online presences in social media

We maintain an online presence on social networks and career platforms so that we can exchange information with the users registered there and get in touch with them easily. We regularly publish and share content, offers and product recommendations on our social media presences.

6.1 Scope of processing

With every interaction on our social media presences, the operators of the respective social network automatically collect and store your personal data for market research and advertising purposes. It cannot be ruled out that the data collected may also be processed outside the European Union. Among other things, this may make it more difficult to enforce the rights of data subjects. Usage profiles are created from the data collected using pseudonyms. These can be used, for example, to place advertisements within and outside social networks that presumably correspond to your interests. For these purposes, cookies or similar technologies that record your usage behavior are stored on your end device.

We generally record all messages, content and other information that you share with us when you visit our social media sites, for example when you post something on one of our social media sites or send us private messages. If you have an account with the relevant social network, we may also see your public information, such as your username, information in your public profile and content that you share with a public audience.

The type, scope and purposes of the processing of your personal data in social networks are primarily determined by the operators of the social networks. For further information on data processing by the respective provider as well as your rights in this regard and setting options to protect your privacy, please refer to the data protection information of the respective provider:

- Facebook (Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) https://www.facebook.com/about/privacy/
- LinkedIn (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA) https://www.linkedin.com/legal/privacy-policy
- Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany)
https://privacy.xing.com/en
- YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) https://policies.google.com/privacy?hl=en&gl=en
- Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland) https://privacycenter.instagram.com/policy

6.2 Legal basis for processing

If you are asked by the respective social network operator for consent to data processing, the legal basis for data processing is Article 6(1)(a) GDPR. Otherwise, the legal basis is Article 6(1)(f) GDPR. We have an overriding legitimate interest in an optimized presentation of our offers and effective communication with our customers and interested parties.

6.3 Right of withdrawal

You have the right to withdraw your consent at any time without giving reasons with effect for the future. If you do not agree to the future transmission of your data when using our social media presences, you have the option of objecting to the data processing:

- Facebook: https://www.facebook.com/settings?tab=ads
- Xing: https://privacy.xing.com/en/privacy-policy/what-rights-can-you-assert
- LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
- Instagram: https://privacycenter.instagram.com/policy
- Google: https://policies.google.com/privacy#europeanrequirements

In the event of revocation, it is possible that not all functions of our websites will be fully available to you.
 

7. Transfer of data to third countries outside the EEA

Yes, your personal data may be transferred outside the European Union or outside the European Economic Area to one or more external service providers. The transfer takes place, for example, when you visit our website (Google LLC), purchase our products (MDESIGN student & MDESIGN student pro) online (Verifone) or participate in one of our webinars (LogMeIn Inc.). The transfer is subject to legally recognized adequacy mechanisms such as EU standard contractual clauses:
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32021D0914 or the revised Swiss Data Protection Act nDSG of the FDPIC:
https://www.edoeb.admin.ch/edoeb/en/home/datenschutz/grundlagen.html

 
8. storage

Insofar as we process and use your personal data to establish, execute and terminate a contract with you, we store your data for as long as the statutory retention periods, which primarily result from civil, commercial and tax law (AO & HGB), prescribe.

If the processing of your personal data is based on our legitimate interest or on your consent, we will store your data until you object to its use or revoke your consent. However, if longer storage of your data is required by law or if we need your data to assert legal claims, we will store your personal data until the relevant periods have expired or until the claims have been settled.
 

9. data security

We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is encrypted by the green lock symbol in the browser window. We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

 
10. rights of data subjects

a) Withdrawal of consent (Art. 7 GDPR)

You can revoke any consent you have given to the processing of your personal data at any time with effect for the future. Please note that the revocation does not extend to data processing for which there is a legal reason for permission and which may therefore be processed without your consent.

b) Information (Art. 15 GDPR)

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

c) Rectification (Art. 16 GDPR)

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you or the completion of incomplete personal data.

d) Erasure (Art. 17 GDPR)

You have the right to obtain from us the erasure of personal data concerning you without undue delay, unless the processing is necessary for compliance with our legal obligations or for the establishment, exercise or defense of legal claims.

e) Restriction of processing (Art. 18 GDPR)

You have the right to demand that we restrict the processing of data concerning you if one of the conditions set out in Art. 18 para. 1 lit. a - d GDPR is met.

f) Data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you and provided by you in a structured, commonly used and machine-readable format or to have it transferred. (Data portability - e.g. transfer from one organization to another organization).

g) Objection (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is carried out for marketing or other purposes in accordance with Art. 6 (1) (f) GDPR.

h) Complaint to a supervisory authority (Art. 77 GDPR)

If you believe that we are processing your personal data in breach of applicable data protection law, you have the right to lodge a complaint with a supervisory authority. The following supervisory authority is generally responsible for us

Sächsischer Datenschutzbeauftragter
Deverientstrasse 5
01067 Dresden
Germany
Phone:  +49 351 85471-101
Email:  saechsdsb@slt.sachsen.de

 

This Privacy Policy was last updated on November 13, 2023.