1 Privacy Policy of mozaiq operations GmbH (“mozaiq”)

Last update: August 2018

1.1 Introduction

mozaiq considers protection of your privacy in the processing of your personal data an important issue. This privacy policy (“Privacy Policy”) applies to all visitors and users of www.mozaiq.io (“Website”) which is offered by mozaiq operations GmbH (“mozaiq” or “we” or “us”). Pease read this Privacy Policy carefully.

1.2 Controller

mozaiq is controller within the meaning of the General Data Protection Regulation (“GDPR”) with regard to the personal data collected and processed as described in the following.
mozaiq operations GmbH
Sonnenstrasse 23
80331 Munich
Germany
info at mozaiq dot io
You can contact our Data Protection Officer as follows:
mozaiq operations GmbH
Data Protection Officer
Sonnenstrasse 23
80331 Munich
Germany
Email: privacy@mozaiq.io.

If you have any questions or concerns regarding privacy issues and your personal data or would like to exercise your privacy rights, please email us with the subject line “Data Privacy” at privacy@mozaiq.io.

1.3 Subject-matter of Data Protection

The subject matter of data protection is personal data. Pursuant to Art. 4(1) GDPR, this includes all information relating to an identified or identifiable natural person, e.g., name or email address.

1.3.1 Automated Data Collection

When accessing our Website, your end device automatically transmits data for technical reasons. The following data is stored separately from other data that you may transmit to us, for example: IP address, date and time of access, browser type/version, operating system used, URL of the previously visited website and amount of data sent.
We collect this information in order to provide you with our Website. The legal basis is Art. 6(1)(b) GDPR. If we process your data as described above for the purpose of providing the functions of our Website, you are contractually obliged to provide us with this data. Without this data we are not able to provide you with these functions.
Furthermore, the processing of the aforementioned data serves the purpose of ensuring system security and stability. In this respect, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interests in data processing are to ensure the proper functioning of our Website.

1.3.2 Contacting us

If you contact us per email, we will retain your email address and further data you submit with the email in order to process your inquiry/request. We collect and process such data in order to answer your inquiry/request, Article 6(1)(b) GDPR. Please note that we may need further data in order to answer your inquiry/request (e.g. your name or invoice address), if it is impossible to do so without such data.

1.4 Transfer of your personal data

mozaiq may transfer your personal data to third parties if this is required for performance of the contract or for legal reasons (Art. 6(1)(b) GDPR). Further, we may transfer your personal data to third parties if you explicitly consent to such transfer (Art. 6(1)(a) GDPR). In addition, we may transfer your personal data if this is necessary for compliance with a legal obligation to which mozaiq is subject. Any data transfer will take place in accordance with applicable data protection laws.
We use the following data processors:

• service providers in the areas of web design and hosting which are located in Germany; and
• the service providers as specified in Sec. 1.6, 1.7, 1.8, 1.9 and Sec. 1.10 below.

The transfer of personal data to data processors is based on Art. 28(1) DSGVO, or alternatively on our legitimate interest in the economic and technical advantages associated with the use of specialized data processors, and the fact that your rights and interests in protecting your personal data do not predominate, Art. 6(1)(f) GDPR.
We also process data in countries outside the European Union ("EU") if there is an adequate level of data protection. In a decision of 12 July 2016, the European Commission decided for the USA that an adequate level of data protection exists under the provisions of the EU-U.S. Privacy Shield (Adequacy Decision, Art. 45 GDPR). We use the following service provider, which is certified according to the EU-U.S. Privacy Shield: Google (Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA). For further information contact us by e-mail at privacy at mozaiq.io.

1.5 Use of Cookies

This website uses the following types of cookies, whose scope and way of functioning will be explained in the following: transient cookies and persistent cookies.
Transient cookies are automatically deleted when you close the browser. Session cookies are a type of transient cookie. They store a so-called session ID, which allows us to recognise your computer again when you return to our Website. Session cookies are deleted when you log out or close the browser. Persistent cookies are automatically deleted after a predetermined period of time that varies depending on the cookie. You can delete cookies in the security settings of your web browser at any time.
You can configure your web browser settings just as you like and, for example, reject all third-party cookies or all cookies. We would like to inform you that if you restrict cookies, you may not be able to use all of the features of this website.

1.6 Google Analytics

mozaiq uses features of the web analytics service Google Analytics, operated by Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called „cookies“. These are text files that are stored on your computer and allow to analyse your use of the Website.
The information generated by the cookie about your use of this Website is usually transferred to a Google server in the US and stored there. On this website Google Analytics has been expanded to the code "gat._anonymizeIp ();" to ensure an anonymous collection of IP addresses (so called IP-masking). As IP anonymization is activitated on this Website, your IP address will be previously abbreviated within Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the full IP address is transferred to a Google server in the USA and is abbreviated there. The IP address transmitted by your browser within the context of Google Analytics will not be combined with any other data held by Google. On behalf of the operator of this Website Google will use this information to evaluate your usage of the Website, to create reports on website activities and to provide other services related to Website and internet usage to the Website operator.
You may refuse the use of cookies by selecting the appropriate settings on your browser; however please note that if you do this you may not be able to use the full functionality of this website. In addition to that you may prevent the collection of the information generated by the cookie about your use of the website (including you IP address) and the processing of this data by Google if you download and install the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en
You can find further information about the Terms and Conditions of Use and Privacy Policy at http://www.google.com/analytics-/terms/de.html or under http://www.google.com/intl/de/-analytics/privacyoverview.html.
We use Google Analytics due to our legitimate interest to offer the best possible website functions, to evaluate the statistics of use and to better advertise our Website, Art. 6(1)(f) GDPR.

1.7 Lead Inspector

For statistical evaluation of visitor access, data is collected, processed and stored with technologies of Lead Inspector GmbH for marketing purposes and for the recognition of web visitors. The Lead Inspector GmbH technology uses this data to determine addresses, but only in cases in which it can ensure that it is a company and not a single person as a visitor. So-called cookies may be used for this purpose. Cookies are small text files that are stored on your computer and enable an analysis of your use of the website. The company data collected by Lead Inspector GmbH may also contain personal data. Lead Inspector GmbH may use information left behind by visits to the websites to create anonymous user profiles. If IP addresses are collected, they will be made anonymous immediately after collection by deleting the last number block. The data collection and storage by Lead Inspector GmbH for this Website can be objected to at any time with effect for the future at www.leadinspector.de/widerspruch.
We use Lead Inspector due to our legitimate interest to offer the best possible website func-tions and to evaluate the statistics of use and to better advertise our Website, and the fact that your rights and interests in protecting your personal data do not predominate, Art. 6(1)(f) GDPR.

1.8 Integration of Google Maps

We use the offerings of Google Maps on our Website. This allows us to display interactive maps for you on the Website and facilitates the convenient use of the map feature.
Through your visit to the website, Google will be informed that you pulled up the corresponding subpage of our website. The data mentioned under Sec. 3.1 is also transmitted. This will occur regardless of whether Google makes a user account available through which you are logged in or if there is no user account at all. If you are logged into Google, your data will be directly assigned to your account. If you don’t want the information assigned directly to your profile with Google, you will have to log out before activating the button. Google stores your data as a usage profile and uses it for advertising, market research, and/or user-friendly configuration of its website. Such usage serves particularly (also for users who are not logged in) the purpose of providing customised needs-based advertising and in order to inform other users of the social network of your activities on our Website. You have the right to deny permission for such a user profile to be formed, but in order to assert this right you must contact Google.
We integrate Google Maps due to our legitimate interest to offer the best website functions, and the fact that your rights and interests in protecting your personal data do not predominate, Art. 6(1)(f) GDPR.
For further information on the purpose and scope of data collection and its processing by the plug-in provider, see the data protection declaration of the provider. There you will also receive further information on your rights within this context and setting options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the United States and has agreed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

1.9 Integration of YouTube videos

mozaiq uses the YouTube video platform operated by YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 USA (“YouTube”). We have integrated YouTube videos into our online offerings that are stored on http://www.YouTube.com and can be played directly from our Website. These are all integrated in “Extended Data Protection Mode”, meaning that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data described in Section 3.1 be transmitted. We have no influence on this data transmission.
Through your visit to the website, YouTube will be informed that you pulled up the corresponding subpage of our website. The data mentioned above is also transmitted. This will occur regardless of whether YouTube makes a user account available through which you are logged in or if there is no user account at all. If you are logged into Google, your data will be directly assigned to your account. If you don’t want the information assigned directly to your profile with YouTube, you will have to log out before activating the button. YouTube stores your data as a usage profile and uses it for advertising, market research, and/or user-friendly configuration of its website. Such usage serves particularly (also for users who are not logged in) the purpose of providing customised needs-based advertising and in order to inform other users of the social network of your activities on our website. You have the right to deny permission for such a user profile to be formed, but in order to assert this right you must contact YouTube.
We integrate YouTube videos due to our legitimate interest to offer the best website functions, and the fact that your rights and interests in protecting your personal data do not predominate, Art. 6(1)(f) GDPR.
Further information on the purpose and scope of data collection and its processing through YouTube can be found in the data protection declaration. There you will also receive further information on your rights and setting options for protecting your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the United States and has agreed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

1.10 IFA Marketing Campaign Privacy Policy

Under a contract with mozaiq the pilot Stuttgart gmbh company leads a marketing campaign on thise website: mozaiq.io/ifa

pilot Stuttgart GmbH Paulinenstraße 36 * 70178 Stuttgart * Germany
Web: http://www.pilot.de
Geschäftsführer: Oliver Roth, Bernd Deppermann
AG Stuttgart HRB 731627

pilot Stuttgart GmbH is using a tool ADForm of Adform A/S Wildersgade 10B, sal. 1 DK-1408 Kopenhagen, Denmark, used to perform data analysis for marketing and optimization of our website. The processed data is used by AdForm to establish the corespondence between the advertising contacts and clicks on the advertisements, and also on the resulting usage of the website. Using this methodology we can determine which advertisement has lead to the visit to our website, which products have been of interest then. This helps us to optimize the advertising budget. For the data processing we use online identifiers such as cookie IDs, IP addresses, Device IDs, Advertising IDs. During this process no explicit infos like name or address are saved. All the IDs we use allow us eventually to recognize your device, app or browser again. This information is not used to identify the user personally. The legal basis for this data processing is the Art. 6 1a and 1f of the GDPR as well as Art. 15 3 of TMG. If you do not want your data to be captured by Adform, you could visit this link and deactivate the tracking for your device: https://site.adform.com/privacy-policy-opt-out/

1.11 External Links

This Website may contain links to third-party websites operated by providers that are not associated with mozaiq. Any behaviour of these third parties is beyond our control. mozaiq is not responsible for the processing of personal data by third parties.

1.12 Deletion of Personal Data

We will delete or anonymize your personal data as soon as it is no longer required for the purposes for which we have collected or used it in accordance with the above paragraphs. For more details on our data retention concept, you can contact us by e-mail at privacy at mozaiq.io.

1.13 Your privacy rights

You are entitled to the following rights with regard to your personal data:

1.13.1 Right to access (Art.15 GDPR)

You always have the right to request confirmation as to whether we process your personal data and, where that is the case, to request access to the personal data we hold about you.

1.13.2 Right to rectification (Art. 16 GDPR)

You have the right to request prompt correction of your inaccurate personal data.

1.13.3 Right to erasure (Art. 17 GDPR)

You have the right to request erasure of personal data without undue delay under certain circumstances. Such circumstances may be e.g. if your personal data is no longer necessary for the purposes for which it was collected or if you withdraw consent on which our processing is based according to Article 6(1)(a) GDPR and where there is no other legal ground for processing.

1.13.4 Right to restriction of processing (Art. 18 GDPR)

You have the right to obtain a restriction of processing under certain circumstances. Such circumstances may be e.g. when you think that your personal data is not accurate or if we do not need the personal data for the original purpose of the processing but you need us to keep them for the establishment, exercise or defence of legal claims.

1.13.5 Right to data portability (Art. 20 GDPR)

Under certain circumstances, you have the right to receive your personal data you have provided us with, in a structured, commonly used and machine-readable format and you have the right to transmit that information to another controller without hindrance or ask us to do so.

1.13.6 Right to object to processing (Art. 21 GDPR)

You have the right to object to the processing of your personal data under certain circumstances, in particular if we process your personal data on the legal basis of Art. 6(1)(e) and Art. 6(1)(f) GDPR or if we use your personal data for marketing purposes in accordance with Art. 21 DSGVO. We will stop the processing of your personal data unless we can prove compelling reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

1.13.7 Right to withdraw the consent

If you gave us your consent to collection and processing of your personal data within the meaning of Art. 6(1)(a) GDPR, you have the right to withdraw such consent at any time.

1.13.8 How to exercise your rights

To exercise your privacy rights, please contact us by using the contact information as provided for under Sec. 1.2 of this Privacy Policy.

1.13.9 Complaints

You have a right to file a complaint with a supervisory authority, also in the member state of your habitual residence.
The supervisory authority competent for us is:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 27 (Schloss)
91522 Ansbach
Germany
Tel. +49 981 53 1300
Fax +49 981 53 98 1300
Email: poststelle@lda.bayern.de
Website: https://www.lda.bayern.de

If you think that you might need to contact another supervisory authority, please, contact us using contact information given in Section 1.2 – we will be happy to assist you with the search.

However, if you are not satisfied with any aspect of data processing of your personal data, we would like to know how we can improve the situation. Please feel free to contact us using contact information given in Sec. 1.2 of this Privacy Policy.

1.14 Policy changes

Please note that this Privacy Policy may be developed and changed from time to time. This policy has been last updated in August 2018.

You can find the current version of our Privacy Policy at https://mozaiq.io/privacy-policy