Privacy Policy
Privacy Policy for endax.de
a service provided by futureorg Institut - Research and Communication for SMEs
Source: endax.de/data-protection
Translation note: This is a faithful English translation of the German text published on the source page. Names, addresses, legal citations, retention periods and other substantive particulars have not been altered. In case of doubt, the German source text should be checked.
1. Controller responsible for data processing
futureorg Institut - Forschung und Kommunikation
Martin-Schmeißer-Weg 10
44227 Dortmund
Email: info@futureorg.de
2. Data Protection Officer
Dr. Nilgün Daglar-Sezer
Martin-Schmeißer-Weg 10
44227 Dortmund
Email: daglar@futureorg.de
3. Data processing on our website
As a general rule, we process personal data of users of our website only to the extent necessary to provide a functional website and our content and services. Personal data of our users is generally processed only with the user's consent.
An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by statutory provisions.
4. Collection and storage of personal data and the nature and purpose of its use
4.1 When visiting the website
When you access our website, the browser used on your end device automatically sends information to our website server. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:
- IP address of the requesting computer,
- date and time of access,
- name and URL of the file accessed,
- website from which access is made (referrer URL),
- browser used and, where applicable, the operating system of your computer and the name of your access provider.
We process the aforementioned data for the following purposes:
- ensuring a smooth connection to the website,
- ensuring convenient use of our website,
- evaluating system security and stability, and
- for other administrative purposes.
The legal basis for the data processing is Art. 6(1), sentence 1, point (f) GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your identity.
4.2 When using our contact form
For questions of any kind, we offer you the opportunity to contact us using a form provided on the website. A valid email address must be provided so that we know who submitted the enquiry and can respond to it. Further information may be provided voluntarily. Data processing for the purpose of contacting us is carried out pursuant to Art. 6(1), sentence 1, point (a) GDPR on the basis of the consent you have voluntarily given.
The personal data collected by us for use of the contact form will be automatically deleted once the enquiry you submitted has been dealt with.
4.3 Participation in the online survey for the endax study
As part of the endax studies, we offer you the opportunity to participate in a free online survey. The following data is collected:
- answers to the survey questions (processed in anonymised form),
- email address, surname and first name and, where applicable, further information (voluntary, if you wish to receive results).
Email address, surname and first name and, where applicable, further information (voluntary, if you wish to receive results).
5. Cookies
We use cookies on our website. These are small files that your browser creates automatically and that are stored on your end device (laptop, tablet, smartphone or similar) when you visit our website. Cookies do not cause any damage to your end device and do not contain viruses, Trojans or other malware. Information relating to the specific end device used is stored in the cookie.
However, this does not mean that we thereby obtain direct knowledge of your identity.
The use of cookies serves, on the one hand, to make use of our services more convenient for you. For example, we use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our website. In addition, to optimise user-friendliness, we also use temporary cookies that are stored on your end device for a specified period of time.
If you visit our website again to use our services, it is automatically recognised that you have already visited us and which entries and settings you made, so that you do not have to enter them again.
On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our services for you. These cookies allow us to automatically recognise, when you visit our website again, that you have already visited us. These cookies are automatically deleted after a respectively defined period of time. The data processed by cookies is necessary for the aforementioned purposes to safeguard our legitimate interests and those of third parties pursuant to Art. 6(1), sentence 1, point (f) GDPR.
Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a notice always appears before a new cookie is created. Completely disabling cookies may, however, mean that you cannot use all functions of our website.
6. Disclosure of data
Your personal data will not be transferred to third parties for purposes other than those listed below. We disclose your personal data to third parties only if:
- you have given your explicit consent to this (Art. 6(1), sentence 1, point (a) GDPR),
- disclosure is necessary pursuant to Art. 6(1), sentence 1, point (f) GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed,
- there is a legal obligation to disclose the data pursuant to Art. 6(1), sentence 1, point (c) GDPR, and
- this is legally permissible and necessary pursuant to Art. 6(1), sentence 1, point (b) GDPR for the performance of contractual relationships with you.
7. Data retention period
- Data from the online survey: 5 years after completion of the study, unless other statutory obligations apply.
- Data from the maturity assessment: 3 years after the end of the contract, or deleted earlier upon request.
- Data from contact enquiries: automatically deleted after the enquiry has been processed.
8. Rights of data subjects
You have the following rights at any time:
- Access: information about the processing of your data (Art. 15 GDPR).
- Rectification: correction of inaccurate or incomplete data (Art. 16 GDPR).
- Erasure: right to deletion of your data, provided that no statutory retention obligations prevent this (Art. 17 GDPR).
- Restriction of processing: restriction of the use of your data (Art. 18 GDPR).
- Data portability: transmission of your data in a commonly used format (Art. 20 GDPR).
To exercise your rights, please contact us at daglar@futureorg.de.
9. Changes to the Privacy Policy
We reserve the right to amend this Privacy Policy as necessary in order to comply with legal requirements or to implement changes to our services.