Thank you for visiting our website. This document informs you about how we use your personal data in connection with your use of our website.
When do we process personal data?
We process the personal data which you actively transmit to us by online submission. Furthermore, we automatically process personal data based on your use of our website. Your data may therefore be processed, in particular, in the following cases:
- Visit of our website
- Creation of an account
- Contacting us
- Analysis of which visitors access our website and how they use it
- warding off attacks against our technical infrastructure;
For details, please read the following explanations.
Visit of our website
When you access our website, the company commissioned by us to operate the website processes and stores technical information about the terminal you use (operating system, screen resolution and other, non-personal features) and the browser (version, language settings), and particularly also the public IP address of the computer you use to access our website, as well as the date and time of access. The IP address is a distinct, numerical address under which your terminal sends and/or requests data to or from the internet. We and our service provider do not normally know the identity of the person behind the IP address, unless you disclose data to us during your use of the website which enable us to identify you. Users may also be identified if legal proceedings have to be taken against them (e.g. where our website is attacked) and we learn of their identity in the context of the investigations. You therefore do not normally need to worry about us being able to allocate your IP address to you personally.
Our service provider uses the processed data in non-personal form for statistical purposes, in order to enable us to understand which terminals and which settings are used to visit our website and to optimise the website where necessary. The statistics do not contain personal data. The legal basis for the production of statistics is Article 6 (1) f) GDPR.
Your IP address is also used to enable you technically to access and use our website and for the detection and defence against attacks on our service provider or our website. Unfortunately, attacks with the aim of causing damage to website operators or their users do occur (e.g. denial of access, spying on data, disseminating malware (e.g. viruses) or other illicit purposes). Such attacks would compromise the proper functioning of the data centre of the company commissioned by us, the use of our website and/or its functionalities, and the security of visitors to our website. IP addresses and the time of access are processed for the purpose of defending against such attacks. Via our service provider, we use this processing to pursue our legitimate interest to secure the functioning of our website and defend against illegal attacks against us and the visitors to our website. The legal basis for processing is Article 6 (1) f) GDPR. The stored IP data are deleted (by way of anonymisation) when they are no longer needed for the detection or defence against an attack.
For customer communication and support we use intercom.com, an offer from Intercom Inc., 55 Second Street, Suite 400, San Francisco, CA 94105, USA: Intercom acts as a processor for us. Intercom is a member of the PrivacyShield Convention. Intercom itself collects and uses data to ensure the operation of the service. Further information can be found here
under point 3 "Customer Data".
Creation of an account
If you create an account, we process the information you provide to create, maintain and facilitate the use of authory.com services associated with your customer account. The legal basis for processing is Article 6 (1) (b) GDPR.
The data stored in your customer account will be deleted when you cancel your customer account with us. Insofar as we are legally obliged to store for a longer period of time (for example to fulfill accounting obligations) or are legally entitled to longer storage (for example because of a current legal dispute against the holder of an account), the deletion takes place after expiration of the storage obligation or legal authorization.
Contact requests / Chat
When you send us a message through one of the contacting options offered we use the data you submit to us to process your enquiry. The legal basis for this is our legitimate interest to respond to your enquiry pursuant to Article 6 (1) f) GDPR. If your enquiry relates to the conclusion of a contract with us, a further legal basis for the processing is Article 6 (1) b) GDPR. The data are deleted once your enquiry has been dealt with. Where we are under a statutory obligation to retain the data for longer, they will be deleted following expiry of the applicable retention period.
Google Analytics allows us to create user statistics about our website in non-personalised form and to collect demographic data about visitors and their usage behaviour. Furthermore, statistics are produced which help us to understand how users find our website, in order to improve our search engine optimisation and our advertising campaigns. This processing serves our legitimate interest to improve our website and advertising campaigns. The legal basis for processing is Article 6 (1) f) GDPR.
The pseudonymous data are deleted after 14 months.
Alternatively to the browser add-on or on browsers on mobile devices, please click on this link
to prevent any future collection by Google Analytics on this website (the opt-out will only work in this browser and only for this domain. This will set an opt-out cookie on your device. If you delete the cookies in this browser you will need to click on this link again).
Google is a party to the PrivacyShield agreement and has concluded a third-party data processing agreement on Google Analytics with us.
A cookie is a small text file which is stored on your terminal by your browser when you access our website. If you visit our website again at a later time we are able to read these cookies again. Cookies are stored for varying lengths of time. You have the option at any time to configure in your browser which cookies you would like your browser to accept; however, this may result in our website malfunctioning. You may also delete cookies yourself at any time. If you do not do this we may specify when the cookie is set how long we wish the cookie to remain on your computer. Here we distinguish between so-called session cookies and persistent cookies. Session cookies are deleted by your browser when you leave our website or close the browser. Persistent cookies are stored for the period of time specified by us when the cookie is set.
- Technically required cookies, which are strictly necessary to use the functions of our website. Without these cookies, certain functions cannot be provided.
- Functional cookies, which are used to enable the technical implementation of certain functions you wish to use.
- Analysis cookies, which serve the purpose of analysing use of our website. Please read the information about Google Analytics for details.
Most browsers used by our users allow you to configure which type of cookie should be saved and enable the deletion of (specific) cookies. If you limit the setting of cookies on particular websites or reject any cookies from third-party websites you may not be able to use our website to the full extent. Information about cookie settings in the most common browsers can be found here:
Right to information
According to Article 15 GDPR, you have the right to request that we confirm whether any personal data concerning your person is being processed by us. If this is the case, you have the right to be informed about this personal data and to further information specified in Article 15 GDPR.
Right to correction
According to Article 16 GDPR, you have the right to demand the immediate correction of incorrect personal data concerning your person. Taking into consideration the purpose of processing, you also have the right to demand the completion of incomplete personal data, including by way of a supplementary explanatory note.
Right to erasure
You have the right to demand that we immediately delete any personal data concerning your person. We must delete personal data without undue delay, provided the corresponding conditions of Article 17 GDPR apply. For details, please refer to Article 17 GDPR.
Right to restrict processing
According to Article 18 GDPR, you have, under certain conditions, the right to demand a restriction of our processing of your personal data.
Right to data portability
According to Article 20 GDPR, you have the right to obtain, in a structured, commonly used and machine-readable format, the personal data concerning your person which you have provided, and you have the right to transmit these data to another controller without hindrance by us, provided the processing is based on consent pursuant to Article 6 (1) a) GDPR or Article 9 (2) a) GDPR or on a contract pursuant to Article 6 (1) b) GDPR and the processing is performed by automated processes.
Right to object
According to Article 21 GDPR, you have the right to object to the processing of personal data concerning your person which takes place on the basis of Article 6 (1) e) or f) GDPR; this also applies to any profiling based on these provisions.
Where we process your personal data to perform direct advertising, you have the right at any time to object to the processing of personal data concerning your person for the purposes of such advertising; this also applies to profiling in connection with such direct advertising.
If you wish to exercise one of your rights, please contact us as the controller using the above contact details or use another contact option offered by us to notify us accordingly. If you have any questions, please do not hesitate to contact us.
Right to complain to a supervisory authority
According to Article 77 GDPR, you have the right, without prejudice to any other administrative or judicial legal remedy, to complain to the supervisory authority. This right may particularly be exercised in the member state of your place of residence, your place of work or the place of the alleged breach, if you believe that the processing of the personal data concerning your person breaches the GDPR.