We are very pleased about your interest in our company.
The topic data security has a particularly high value for the management of i4.0MC – Industrie 4.0 Maturity Center GmbH. A use of the Internet sides of i4.0MC – Industrie 4.0 Maturity Center GmbH is generally possible without any indication of personal data. However, if you wish to take advantage of a special service offered by our company via our Internet pages, it may be necessary to process personal data.
If it is necessary to process personal data and there is no legal basis for such processing, we generally obtain the consent of the data subject. The processing of personal data, such as the name, address, email address or telephone number of a data subject, is always carried out in accordance with the basic data protection regulation and in compliance with the applicable country-specific data protection regulations.
For this reason, you cannot use our website to collect your data without the corresponding confirmation, as we are obliged by the relevant regulations (e.g. the European General Data Protection Regulation and other regulations on data protection) to fulfil the transparency obligations contained therein.
By means of this Data Privacy Statement, our company wishes to inform the public about the type, scope and purpose of the personal data collected, used and processed by us. Furthermore, this Data Privacy Statement informs data subjects of their rights.
i4.0MC – Industrie 4.0 Maturity Center GmbH as the controller responsible for the processing has implemented numerous technical and organisational measures to ensure the most complete protection of the personal data processed via these Internet pages. Nevertheless, Internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.
Table of Contents
The data protection declaration of i4.0MC – Industrie 4.0 Maturity Center GmbH is based on the terminology used by the European Directive and Regulation Giver in the adoption of the General Data Protection Regulation (GDPR) and in the “German Act on the Adaptation of Data Protection Law to Regulation (EU) 2016/679 and Implementation of Directive (EU) 2016/680 (DSAnpUG-EU)”.
To ensure this, we would like to explain the terms used in advance.
Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, on-line identification, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Data subject means any identified or identifiable natural person whose personal data are processed by the controller.
Processing is any operation or set of operations, performed with or without the aid of automated means, which is performed upon personal data, such as collection, recording, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.
Profiling is any automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the performance of work, economic situation, health, personal preferences, interests, reliability, conduct, location or change of location of that natural person.
Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data is not attributed to an identified or identifiable natural person.
Controller is the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or national law, the controller or the specific criteria for his designation may be provided for by Union or national law.
Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
The recipient is any natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not that person is a third party. However, authorities which may receive personal data in the context of a specific investigation mandate under Union or national law shall not be considered as recipients.
Third party means any natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorized to process the personal data.
Consent shall mean any freely given and informed unequivocal expression of the data subject’s wishes in the specific case, in the form of a statement or any other unequivocal affirmative act by which the data subject signifies his or her consent to the processing of personal data relating to him or her.
The person responsible within the meaning of the Basic Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is
i4.0MC – Industrie 4.0 Maturity Center GmbH
Telefon: +49 241 412522-0
Dr.-Ing. Sebastian Schmitz
Phone: +49 241 412522-0
Die Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (The State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia)
Postfach 20 04 44
40102 Düsseldorf, Germany
40213 Düsseldorf, Germany
Phone: +49 211 38424-0
Fax: +49 211 38424-10
E-mail: firstname.lastname@example.org Internet: www.ldi.nrw.de
We process your data for the following purposes:
To fulfil a contract concluded with you or to carry out pre-contractual measures (in accordance with Article 6 (1) b) of the EU-GDPR) such as
In order to fulfil your wishes, to improve our services and to strengthen the customer relationship, taking into account the consent you have given in the approval in the scope of the Data Privacy Statement (in accordance with Article 6 para 1 a) EU GDPR),
To fulfil legal obligations (in accordance with Article 6(1)(c) EU GDPR),
For purposes of legitimate interest (in accordance with Article 6 (1) f) EU GDPR)
We regularly process the following data in particular within the scope of our business activities: Last name, first name, title, position/function, company and company address (street with house number, postal code, city), contact details (telephone number, fax number, e-mail address), web address.
Your data will be processed within the responsible department by our employees, who are regularly trained and committed to data protection. Furthermore, your data will only be passed on to recipients outside our company in compliance with legal regulations or on the basis of your consent. In order to be able to carry out our business operations (see section 5), we also work together with other companies to whom we transfer your data in specific individual cases. These include in particular the following:
commissioned data processing exist with all service providers.
We would like to point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.
The web pages of i4.0MC – Industrie 4.0 Maturity Center GmbH collect with each call of the web pages by a data subject or an automated system a set of general data and information. This general data and information is stored in the log files of the server.
The following information can be recorded:
When using this general data and information, our company does not draw any conclusions about the data subject.
This information is rather needed:
This anonymously collected data and information is evaluated by our company on the one hand statistically and also with the aim of increasing data protection and data security in our company, in order to ultimately ensure an optimum level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
The Internet pages of i4.0MC – Industrie 4.0 Maturity Center GmbH contain due to legal regulations data, which make a fast electronic establishment of contact to our enterprise possible as well as a direct communication with us, which likewise covers a general address of the so-called electronic post (E-mail address). Where a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data provided voluntarily by a data subject to the controller are stored for the purposes of processing or for contacting the data subject. This personal data will not be passed on to third parties.
The controller shall process and store personal data relating to the data subject only for the period of time necessary to achieve the purpose of storage or where provided for by the European legislator or other legislator in laws or regulations to which the controller is subject.
If the purpose of storage ceases to apply or if a storage period prescribed by the European Directive and Regulation Giver or another competent legislator expires, the personal data will be blocked or deleted as a matter of routine and in accordance with the statutory provisions.
Right to confirmation
Every data subject shall have the right to obtain confirmation from the controller as to whether personal data relating to him or her are being processed.
Right to information
Any data subject concerned by the processing of personal data has the right to obtain at any time and free of charge from the controller information on personal data relating to him/her and a copy thereof.
Furthermore, the European Directive and Regulation maker has granted the data subject access to thenfollowing information:
The data subject shall also have the right to obtain information as to whether personal data have been transferred to a third country or to an international organisation. If this is the case, the data subject shall also have the right to obtain information on the appropriate guarantees in connection with the transfer.
Right of rectification
Any data subject concerned by the processing of personal data shall have the right to obtain the rectification without delay of inaccurate personal data relating to him/her. Furthermore, the data subject shall have the right to obtain, having regard to the purposes of the processing, the completion of incomplete personal data, including by means of a supplementary declaration.
Right of cancellation (right to be forgotten)
Any data subject concerned by the processing of personal data shall have the right to obtain from the controller the erasure without delay of personal data relating to him/her, where one of the following reasons applies and insofar as the processing is not (or is no longer) necessary
If any of the above reasons apply and a data subject wishes to request the deletion of personal data, he or she may at any time contact our data protection officer or another employee of the data controller. The data protection officer or another employee will arrange for the deletion request to be complied with.
If the personal data has been made public by i4.0MC – Industrie 4.0 Maturity Center GmbH and our company as the responsible party is obliged to delete the personal data in accordance with Art. 17 para. 1 GDPR, we will take reasonable measures, including technical measures, taking into account the available technology and the implementation costs, to inform other controllers who process the published personal data that the data subject has requested these other controllers to delete all links to these personal data or copies or replications of these personal data, unless the processing is necessary. The data protection officer or another member of staff will arrange the necessary steps in individual cases.
Right to restriction of processing
Any data subject concerned by the processing of personal data shall have the right to obtain from the controller the restriction of the processing if one of the following conditions is met:
If one of the above-mentioned conditions is given and a data subject wishes to request the restriction of personal data stored by i4.0MC – Industrie 4.0 Maturity Center GmbH he/she can contact our data protection officer or another employee of the data controller at any time. The data protection officer or another member of staff will arrange for the processing to be restricted.
Right to data portability
Every data subject has the right to obtain, in a structured, standard and machine-readable format, the personal data concerning him/her which have been supplied by the data subject to a controller. The data subject also has the right to transfer these data to another controller without hindrance from the controller to whom the personal data have been made available, provided that the processing is based on the consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and that the processing is carried out by means of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Furthermore, in exercising their right to data transfer, the data subject has the right, in accordance with Art. 20 para. 1 GDPR, to obtain that personal data be transferred directly from one controller to another controller, insofar as this is technically feasible and provided that it does not adversely affect the rights and freedoms of other persons.
In order to assert the right to data transferability, the data subject may at any time contact the appointed data protection officer or another employee.
Right to object
Any data subject concerned by the processing of personal data has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her carried out pursuant to Art. 6 para. 1 lit. e or f GDPR. This also applies to profiling based on these provisions.
i4.0MC – Industrie 4.0 Maturity Center GmbH shall no longer process the personal data in the event of an objection, unless we can prove compelling reasons for processing worthy of protection which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. If i4.0MC – Industrie 4.0 Maturity Center GmbH processes personal data for the purpose of direct marketing, the data subject shall have the right to object at any time to the processing (with effect for the future) of personal data for the purpose of such marketing. This also applies to profiling, insofar as it is associated with such direct mail. If the data subject objects to the processing for direct marketing purposes, i4.0MC – Industrie 4.0 Maturity Center GmbH shall no longer process these personal data for these purposes.
In addition, the data subject has the right to object, for reasons arising from his or her particular situation, to the processing of personal data concerning him or her which is carried out at i4.0MC – Industrie 4.0 Maturity Center GmbH for statistical purposes in accordance with Art. 89 para. 1 GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
In order to exercise the right of objection, the data subject may contact the data protection officer or another member of staff directly. The data subject shall also be free to exercise his/her right of objection in relation to the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures involving technical specifications.
Automated decisions in individual cases including profiling
Any data subject concerned by the processing of personal data shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or significantly affects him or her in a similar way, granted by the European legislator, provided that the decision
i4.0MC – Industrie 4.0 Maturity Center GmbH shall take appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject, which shall include at least the right to obtain the intervention of a person on the part of the controller, to present the own standpoint and to contest the decision.
If the data subject wishes to exercise rights relating to automated decisions, he or she may at any time contact the data protection oOfficer or any other member of the controller’s staff.
Right of revocation of a data protection consent
Every data subject affected by the processing of personal data has the right, granted by the European Directive and Regulation Giver, to revoke his or her consent to the processing of personal data at any time. If the data subject wishes to exercise this right to withdraw consent, he or she may at any time contact our data protection officer or another employee of the controller.
The controller collects and processes the personal data of applicants for the purpose of processing the application procedure. The processing may also be carried out by electronic means. This is in particular the case if an applicant submits relevant application documents to the controller by electronic means, such as e-mail or a web form available on the website. If the controller concludes an employment contract with an applicant, the transmitted data is stored for the purpose of processing the employment in compliance with the statutory provisions. Applicant data may be passed on to another person within i4.0MC – Industrie 4.0 Maturity Center GmbH, if this person also has an open job advertisement with thematic relevance.
If the controller does not conclude an employment contract with the applicant, the application file will be automatically deleted 6 months after the notification of the decision of refusal, unless deletion is contrary to any other legitimate interest of the controller. Other legitimate interests in this sense include, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).
If you would like to receive one of the newsletters offered on the website, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. In order to ensure that the newsletter is sent by mutual agreement, we use the so-called double opt-in procedure. In the course of this, the potential recipient can be included in a distribution list. Subsequently, the user receives a confirmation e-mail to confirm the registration in a legally secure manner. The address will only be actively included in the distribution list if confirmation is received.
We use this data exclusively for sending the requested information and offers.
Mailtrain is used as the newsletter software. Mailtrain is prohibited from selling your data and using it for purposes other than sending newsletters.
Mailtrain is hosted on our own server. You can revoke your consent to the storage of the data, the email address and their use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter.
With the help of Mailtrain, we are able to analyse our newsletter campaigns. For example, we can see whether the newsletter was opened with which device. In this way, we can better adapt our newsletters to the respective target groups.
If you do not want any analysis by Mailtrain, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.
On our website we use Google Analytics, a web analysis service of Google Inc. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of our website is usually transferred to a Google server in the USA and stored there. However, in the event that IP anonymisation is activated on our website, your IP address will be shortened by Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google.
On our website we use Google Analytics with the extension “_anonymizeIp()”. This enables us to process IP addresses in a shortened form, thus excluding the possibility of direct personal references.
Art. 6 I lit. a GDPR serves our company as a legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations necessary for the supply of goods or provision of other services or consideration, the processing is based on Art. 6 I lit. b GDPR.
The same applies to such processing operations that are necessary for the performance of precontractual measures, for example in cases of enquiries about our products or services. If our company is subject to a legal obligation which makes the processing of personal data necessary, for example to fulfil tax obligations, the processing is based on Art. 6 I lit. c GDPR.
In rare cases, the processing of personal data might be necessary to protect vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company were to be injured and his or her name, age, health insurance details or other vital information had to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I lit. d GDPR.
Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or of a third party, unless the interests, fundamental rights and freedoms of the data subject prevail. Such processing operations are permitted to us in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47 sentence 2 GDPR).
The criterion for the duration of storage of personal data is the respective legal retention period. After the expiry of this period, the corresponding data is routinely deleted if it is no longer required for the fulfilment or initiation of the contract.
We would like to inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner). Sometimes it may be necessary for the conclusion of a contract that a data subject provides us with personal data, which must subsequently be processed by us. For example, the data subject is obliged to provide us with personal data if our company concludes a contract with him/her. Failure to provide the personal data would mean that the contract with the data subject could not be concluded.
Before the data subject provides personal data, he or she can contact our data protection officer. Our data protection officer will then inform the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences would be if the personal data were not provided.
As a responsible company, we avoid automatic decision making or profiling.
Last update: 13 October 2021