Privacy policy of IntegaDesign GmbH

How we handle your data

We process personal data only where it is necessary to operate this website, to provide our products and to work with you. This policy tells you which data that is, what we use it for, on which legal basis and how long we keep it.

1. Controller

IntegaDesign GmbH, Managing Director Markus Rufflar
Otto-Hahn-Straße 36, 63303 Dreieich, Germany
Phone: +49 6103 7329244
Email: info@integadesign.de

We have not appointed a data protection officer because the conditions of Section 38 BDSG (German Federal Data Protection Act) do not apply to us. We answer questions about data protection at the address above.

2. Legal bases

We process data on the basis of your consent (Art. 6(1)(a) GDPR), to perform a contract or to take steps prior to entering into a contract (lit. b), to comply with legal obligations such as tax retention periods (lit. c), and on the basis of our legitimate interests (lit. f), for example in the secure operation of this website.

3. Hosting

This website, our customer portal and our licence server run on servers of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany, in the Nuremberg data centre. Hetzner processes the data exclusively on our behalf; a data processing agreement pursuant to Art. 28 GDPR is in place.

4. Server log files

Technical details are logged with every request: the address called up, date and time, the volume of data transferred, browser type and operating system, the referring page and the IP address. The purpose is secure and uninterrupted operation and the prevention of attacks (Art. 6(1)(f) GDPR). The logs are deleted after 30 days at the latest; they are not combined with other data.

5. Cookies and consent

We set technically necessary cookies so that login, language selection and forms work (Art. 6(1)(f) GDPR, Section 25(2) TDDDG). Everything beyond that, in particular audience measurement, is only set after your consent through the cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can change your decision at any time via the "Cookie settings" link in the footer. Without consent, these services remain completely switched off.

6. Enquiries and consultation requests

If you write to us through a form or by email, we process the details you provide (name, company, email address, phone number, your message and voluntary details such as position and website) in order to answer your enquiry and prepare a quotation (Art. 6(1)(b) and (f) GDPR). Enquiries are stored in our customer management system. We delete them once they are no longer needed and no retention obligation applies; if a contract is concluded, tax retention periods of six to ten years apply.

7. Downloads and white papers

Some files are only released after a short request. We use the data provided to make the file available to you and to assign your request (Art. 6(1)(b) GDPR). Freely accessible files can be downloaded without providing any data.

8. Customer portal

We create a user account for the customer portal. We process your name, email address, company assignment and the data on licences, orders, invoices and tickets that is part of performing the contract (Art. 6(1)(b) GDPR). You can have the account deleted at any time; commercial records are kept until the statutory retention period expires.

9. Licence validation of our software

Our programs check whether a valid licence exists, both during activation and in operation. In doing so, the licence key, an identifier for the workstation and the IP address are transmitted to our own licence server and stored there. The purpose is performance of the licence agreement and prevention of unauthorised use (Art. 6(1)(b) and (f) GDPR). No third-party service is involved. The data is stored for the duration of the licence relationship and afterwards until the retention periods expire.

10. Emails about news and invitations

We inform customers and interested parties by email about new products, training courses and webinars. The legal basis is your consent (Art. 6(1)(a) GDPR) or, where a business relationship exists, our legitimate interest in direct marketing (Art. 6(1)(f) GDPR, Section 7(3) UWG). These emails contain a tracking pixel that tells us whether a message was opened and a link clicked; this helps us choose topics. You can object to receiving them at any time, using the unsubscribe link in every email or by sending us a message. We then add your address to a suppression list so that it is not contacted again.

11. Webinars and online meetings

We use Microsoft Teams (Microsoft Ireland Operations Ltd., Dublin) for webinars and online meetings. When you register, we process your name, company and email address in order to send you access details (Art. 6(1)(b) GDPR). During your participation, Microsoft processes connection data on our behalf. Recordings are only made if we announce them in advance.

12. Audience measurement with Google Analytics 4

We use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, only after your consent (Art. 6(1)(a) GDPR). We use Google Consent Mode v2: without consent, no analytics data is collected and no cookies are set. After your consent, pseudonymised usage data such as page views, session duration and country of origin is processed, including on servers in the United States. The transfer is based on the EU-US Data Privacy Framework and standard contractual clauses pursuant to Art. 46 GDPR. The IP address is truncated. You can withdraw your consent at any time via the cookie settings. Further information: Google privacy policy.

13. Videos

On some pages we embed videos from YouTube, operated by Google Ireland Limited. We use the extended privacy mode (youtube-nocookie.com): before a video starts, YouTube does not set any cookies for recognition purposes. As soon as you play a video, connection data including your IP address is transmitted to Google. The legal basis is our legitimate interest in presenting our products clearly (Art. 6(1)(f) GDPR).

14. Fonts

We serve the fonts of this website from our own server. No data is transmitted to Google or any other third party in the process, not even your IP address.

15. Links to social networks

In the header and footer we link to our profiles on LinkedIn and YouTube. These are plain links, not embedded components: no data is transmitted to these networks unless you click the link.

16. Job applications

We process application documents exclusively for the application procedure (Art. 6(1)(b) GDPR, Section 26 BDSG). If no employment relationship comes about, we delete the documents six months after the procedure ends, unless you have agreed to longer storage.

17. Recipients of your data

Within our company, only those departments that need the data for their work have access to it. Beyond that, we pass data to our hosting provider, our email provider (Microsoft), our tax advisors and auditors within the scope of their work, and our bank when processing payments. No payment service providers are involved, because purchasing through the website is not possible. Data processing agreements pursuant to Art. 28 GDPR are in place with our processors.

18. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on a legitimate interest (Art. 21). You can withdraw consent you have given at any time with effect for the future (Art. 7(3) GDPR). Please contact us at the address given above.

Right to lodge a complaint: you can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

19. Storage period

We store personal data only as long as it is necessary for the respective purpose. After that we delete it, unless statutory retention obligations apply; this mainly concerns commercial records with periods of six or ten years under German commercial and tax law.

20. No automated decision-making

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

21. Obligation to provide data

You can use this website without providing personal data. For an enquiry, a download that requires registration, a customer account or a contract, we need the details marked there; without them we cannot provide the respective service.

22. Changes to this policy

We adapt this policy when our processing or the legal situation changes. The version published here is the one that applies.

This English version is provided for convenience. In the event of any discrepancy, the German version prevails.