# Privacy policy ## 1. Responsible person Responsible for the collection, processing and use of your personal data within the meaning of Art. 4 No. 7 GDPR is Layer Acht Software GmbH & Co. KG Heinrich-Geißler-Straße 8 80939 Munich, Germany Tel: +49 (0) 89 215 40 950 Email: website (at) layer-acht ( dot ) net If you wish to object to the collection, processing or use of your data by us in accordance with these data provisions as a whole or for individual measures you can address your objection to the responsible person. ## 2. General purposes of processing We use personal data for correspondence, to fulfill the customer order and to a very limited extent to operate the website. ## 3. Which data we collect and why ### 3.1 Hosting The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space, database services, security services and technical maintenance services that we use for the purpose of operating the website. We hereby process content data, usage data of customers, interested parties and visitors of this website based on our justified interests in an effective and safe provisoin of our website according to Art. 6, passage 1, page 1 DSGVO i.V.n. Art. 28 DSGVO. ## 3.2 Access data We collect information about you when you use this homepage. We automatically register information about your use and your interaction with us and we register data about your computer or mobile phone. We store and use data about every access to our homepage (so called server log files. - Name and URL of the uploaded file - Date and URL of the retrieved file - Transmitted data volume - Notification of the successful retrieval (HTTP response code) - Browser type and browser version - Operating system - Referer URL (i.e. the previously visited page) - IP address of the user and the requesting provider We use this log data without allocation to your person or other profiling for statistical evaluations for the purpose of operation, security and optimization of our website, but also for anonymous recording of the number of visits to our website (traffic) and the extent and type of use of our website and services. Based on this information, we can provide standard-related content and analyze traffic, search for and correct errors and improve our services. This is also our legitimate interest pursuant to Art. 6 para. 1 sentence 1 f GDPRdata protection. ### 3.3 Cookies This website does not use cookies at all. If a login is required, only a session cookie is used. ### 3.4 E-mail contact If you contact us (e.g. via contact form or e-mail), we process your data for the purpose of processing and in case follow-up questions come up. If the data processing is carried out for the implementation of pre-contractual measures, which are carried out at your request, or, if you are already our customer, for the execution of the contract, the legal basis for this data processing is Art. 6 para. 1 sentence 1 b) GDPR. We process further personal data only if you give your consent or if we have a justified interest in processing your data. This could include answering to your e-mails, for example. ## 4. Storage duration Unless specifically stated, we only store personal data for as long necessary to fulfill the purposes pursued. In some cases, the legislator provides for the retention of personal data, for example in tax or commercial law. In these cases, we will only continue to store the data for these legal purposes only, but not processed in any other way and deleted after expiry of the statutory retention period. ## 5. Your rights as a person affected by data processing Under applicable laws, you have various rights regarding your personal data. If you want to assert these rights, please let us know via e-mail or via post with a concrete identification of your person to the address indicated in section 1. In the following you find an overview of your rights. ### 5.1 Right to confirmation and information You have the right to clear information about the processing of your personal data. In detail: You have the right to receive confirmation from us at any time as to whether or not personal data concerning you is being processed. You always have the right to receive a confirmation if you process personal data. If this is the case, you have the right to request information from us free of charge about the personal data stored about you, together with a copy of this data. ### 5.2 Right of rectification You have the right to receive confirmation from us at any time as to whether or not personal data concerning you is being processed. In detail: You always have the right to receive a confirmation if you process personal data. If this is the case, you have the right to request information from us free of charge about the personal data stored about you, together with a copy of this data. ### 5.3 Right to deletion In a number of cases, we are obliged to delete personal data concerning you. In detail: Pursuant to Art. 17(1) GDPR, you have the right to obtain from us the erasure of personal data concerning you without undue delay and we are obliged to erase personal data without undue delay when one of the following grounds applies: - The persona-related information are not necessary for the purposes for which they are collected or otherwise processed. - You withdraw your consent on which the processing according to Art. 6 passage 1, page 1a.) DSGVO or Art. 9 passage 2a.) DSGVO is based and an otherwise legal basis is missing for the proccessing. - According to Art. 21 1 DSGVO you put forward a restriction against the processing and there are no justified reasons for the processing or you object to the processing according to Art. 21 passage 2 DSGVO. - The persona-related data were processed unlawfully. - The deletion of the persona-related data is necessary for the fulfillment of a legal obligation according to Union law or the right of the Member States which we are subject to. - The persona-related data were collected in terms of the offered services of the information society according to Art. 8 passage 1 DSGVO. If we have made the persona-related data public and if we are obliged to delete this data according to Article 17 passage 1 DSGVO, we make appropriate decisions considering available technologies and implementation costs, also of technical kind, to inform responsible persons who process the person-related data that they have demanded the deletion of all links to these persona-related data or of copies or replications of such persona-related data or of copies or replications of such persona-related data. ### 5.4 Right to restriction of processing In a number of cases, you have the right to request that we restrict the processing of your personal data. In detail: You have the right to demand the restriction of this data if one of the conditions is fulfilled: -.The correctness of the persona-related data is contested by you, namely for a duration that enables us to check the validity of this data. - The processing is unlawful and you have refused the persona-related information and instead have demanded the restriction of our persona-related data. - We no longer need the persona-related information for the purpose of processing, but we need the persona-realted data for the money recompensation, exercise and you have demanded the restriction of usage of persona-related data. - You have put forward an opposition against the processing according to Art. 21 passage 1 DSGVO as long as it is not determined yet if the justified reasons outweigh those of your company. ### 5.5 Right to data portability You have the right to receive, transmit, or have us transmit personal data relating to you in machine-readable form. In detail: You have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transmit this data to another controller without hindrance from us, provided that - the processing is based on consent in accordance with Art. 6 Para. 1 Sentence 1 a) GDPR or Art. 9 Para. 2 a) GDPR or on a contract in accordance with Art. 6 Para. 1 Sentence 1 b) GDPR and - the processing takes place using automated procedures. When exercising your right to data portability in accordance with paragraph 1, you have the right to have the personal data transmitted directly from us to another person responsible, to the extent that this is technically feasible. ### 5.6 Right to objection You have the right to object to us lawfully processing your personal data if this is based on your particular situation and our interests in the processing do not outweigh ours. In detail: - You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which is carried out on the basis of Art. 6 Para. 1 Sentence 1 e) or f) GDPR; This also applies to profiling based on these provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. - If personal data is processed by us in order to conduct direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; This also applies to profiling insofar as it is connected to such direct advertising. - You have the right, for reasons arising from your particular situation, to object to the processing of personal data concerning you that is carried out for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR, unless the processing is necessary to fulfill a task in the public interest. ### 5.7 Automatic decisions including profiling Automated decision-making based on the personal data collected does not take place. ### 5.8 Right to withdraw consent under data protection law You have the right to withdraw your consent to the processing of personal data at any time. ### 5.9. Right to lodge a complaint with a supervisory authority You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you is unlawful. ### 6. Data security We make every effort to ensure the security of your data within the framework of the applicable data protection laws and technical possibilities. Your personal data is transmitted in encrypted form. We use TLS (Transport Layer Security), but would like to point out that data transmission on the Internet (e.g when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible. To secure your data, we maintain technical and organizational security measures in accordance with Art. 32 GDPR, which we constantly adapt to the state of the art. ## 7. Transfer of data to third parties, no data transfer to non-EU countries In principle, we only use your personal data within our company. If and insofar as we involve third parties in the fulfillment of contracts (e.g. logistics service providers), they will only receive personal data to the extent that the transfer is necessary for the corresponding service. In case we outsource certain parts of data processing (''order processing''), we contractually oblige processors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subject. Data transfer to companies, authorities or people outside the EU does not take place and is not planned.