Privacy Policy

Our approach to data protection

Data protection law is part of our personal rights. Especially in our constantly developing and networked world, the importance of these rights should not be underestimated. Wandelbots GmbH attaches great importance to data protection law in all its forms and requirements.

The processing of your personal data, for example your name, address, e-mail address or telephone number, is always carried out in accordance with the Basic Data Protection Regulation and in compliance with the country-specific data protection regulations applicable to us. We would like to inform you and also the public about the type, scope and purpose of the personal data we collect, use and process in a comprehensible manner so that comprehensive clarification on the subject of data protection is provided. Below you will therefore find comprehensive information on how we process personal data.

1. Who we are

The responsible for this website within the meaning of the General Data Protection Regulation is:

Wandelbots GmbH
Rayskistraße 25
01219 Dresden
Phone +49 351 86264000

We have appointed a data protection officer. You can reach him under:

Phone +49 351 86264000

datenschutz@wandelbots.com

2. For what purposes and on what legal basis we process data

a. General data processing when visiting the website

Our website collects a series of general data and information from you each time you visit the website. This general data and information is stored in the server’s log files. The following can be recorded

(1) browser types and versions used,

(2) the operating system used by the accessing system,

(3) the website from which an accessing system arrives at our website (so-called referrer),

(4) the date and time of an access to the website,

(5) the length of time a visitor spends on a subpage of our website,

(6) an Internet protocol address (IP address),

(7) the Internet service provider of the accessing system.

When using this general data and information, our company does not draw any conclusions about you. Rather, this information is required in order to

(1) deliver the contents of our website correctly,

(2) optimise the contents of our website,

(3) ensure the long-term functionality of our information technology systems and the technology of our website, and

(4) to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.

Therefore, we evaluate this collected data and information statistically, on the one hand to improve the user experience and also with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The data of the server log files are stored separately from other personal data.

The legal basis for this is Art. 6 (1) f) GDPR. Our legitimate interest lies both in error-free delivery of the website, the ongoing optimisation of website performance and the security of our IT systems.

b. Registration for the Wandelbots License Management Application (“WALIMA”)

As our customer or one of our partners, you have the opportunity to register for a WALIMA account.

The portal provides you with comprehensive options to manage and customise our products and services and to send us messages. The data processing in each case serves to fulfil and adapt our customer and partner contracts on the basis of Art. 6 Para. 1 b) GDPR.

Insofar as you use the functions of the portal to create your own users with your own rights, the processing of this data is your own responsibility. We will not use this user data created by you for our own purposes beyond the fulfilment of our existing contracts with you.

c. Contact options via the website and by e-mail

If you contact us by e-mail or via the forms provided on our website, the personal data you provide will be automatically stored in various ways depending on the reason you contacted us.

If you contact us for career requests your personal data will be sent to our People & Culture Department and will only be used to answer your career request. The legal basis for this is Art. 6 (1) b) GDPR. For further information also check lit. e) within this privacy policy.

If you contact us for press requests your personal data will be sent to our PR-Management to answer your request. The legal basis for this is Art. 6 (1) b) GDPR.

If you contact us for product, platform or educational requests your personal data will be stored within our CRM, Marketing and Sales-Platform Salesforce. Based on your actual reason to contact us we will use this information to conduct your request. Depending on the request the legal basis for this could be Art. 6 (1) b) GDPR (e.g. if we start a contractual relationship as a result of the request) or Art. 6 (1) f) GDPR as long as you show interest in our products and services. In this case our legitimate interest in processing your data would be to gather you or your company as potential customers. For further information about our use of Salesforce see also 4.b) of this privacy policy.

If you contact us for every other reason your data will be processed to answer your request. The legal basis for this is Art. 6 (1) b) GDPR.

If we exchange e-mails with you, we will see how you interact with our automated reactions, for example if you click any links within those e-mails. The legal basis for this is Art. 6 (1) f) GDPR. In this case our legitimate interest in processing your data is a better understanding of your interests in our company.

d. Order our newsletter

On our website you can subscribe to our company newsletter. The legal basis for this is Art. 6 (1) a) GDPR. In order to send our newsletter, we use the “Pardot” service, provided by Salesforce Inc., Further information on this can be found below in the overview of our service providers (data collection by third parties and data transfer to third parties). We inform all subscribers at regular intervals by means of a newsletter about offers and innovations of our company.

For legal reasons, a confirmation email is sent to the email address entered for the first time for the newsletter dispatch using the double opt-in procedure. This confirmation email is used to check whether the person authorised to access the email address has authorised receipt of the newsletter.

When registering for the newsletter, we also store the IP address assigned by the Internet service provider (ISP) at the time of registration, the computer system used and the date and time of registration. The collection of this data is necessary in order to be able to trace a (possible) misuse of your e-mail address at a later date and therefore serves our legal protection.

You can cancel your subscription to our newsletter at any time and revoke your consent to the storage of your personal data, which you have given us for the newsletter dispatch, at any time. For the purpose of cancelling the newsletter subscription or revoking your consent, you will find a corresponding link in each newsletter. Alternatively, you can also contact us directly.

Our newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in emails to enable log file recording and log file analysis. This enables a statistical evaluation of the success or failure of online marketing campaigns. By means of the embedded tracking pixel, we can see whether and when the newsletter was opened and which links were called up by you from the newsletter.

Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by us in order to optimise the newsletter dispatch and to adapt the content of future newsletters even better to the interests of the subscribers. This personal data will not be passed on to third parties. You are entitled at any time to revoke the separate declaration of consent given in this regard via the double opt-in procedure.

The processing of the analysis data is based on Art. 6 para. 1 f) GDPR. Our legitimate interests lie in analysing the usage habits of our subscribers and improving our advertising efforts.

e. Applications

You can also send us your application documents via our website, which we will then process in order to check a possible employment with us.

The legal basis for this is Art. 6 para. 1 b) GDPR.

We have called in the Personio GmbH & Co. KG. as an order processor to handle this task. Further information on data processing can be found further below in the overview of our service providers (data collection by third parties and data transfer to third parties).

f. General advertising activities towards customers and interested parties

As a company, we are always trying to win new customers for our products and services.

We will therefore collect and process personal data from potential interested parties and their contact persons both ourselves and via the service providers we use within the scope of our legitimate interests and on the basis of Art. 6 (1) f) GDPR. Our interest here lies in expanding our customer base.

The same applies to the processing of data of former customers and their contact persons, whom we would like to encourage through our continued advertising activities to purchase our products and use our services again in the future.

Further information on the service providers used for this purpose can be found below in the section on service providers (data collection by third parties and data transfer to third parties). On the basis of our binding internal guidelines, we will constantly check whether the data of individual persons is still covered by our legitimate interests and whether it can be deleted after the expiry of the internally specified deadlines. g. Processing of customer data in a contractual relationship

If you or your employer enter into a contractual relationship with us regarding our products or services, we will process your personal data for the duration of the existence of the contractual relationship on the basis of Art. 6 (1) b) GDPR for the fulfilment of mutual contractual obligations.

In addition, we will also process your data for advertising purposes during the term of the contract on the basis of Art. 6 (1) f) GDPR in order to offer you further products and services of our company. Our legitimate interest here lies in the expansion of our company business vis-à-vis our existing customers.

3. Deletion and blocking of personal data

We process and store your personal data only for the period of time necessary to achieve the purpose of storage or if we are obliged to do so by laws to which the controller is subject. If the storage purpose ceases to apply or if a storage period prescribed expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

As a rule, we will delete data that we have received via e-mails, contact forms or from our service providers and that do not result in an offer process after 2 years. In individual cases, this period can be extended to up to 3 years due to continued communication.

If a contractual relationship is established, we will retain data that is transferred into an offer process for the duration of this contractual relationship and, after its termination, until the expiry of the regular limitation periods. If the contact data for individual data subjects is no longer required due to the specific contractual relationship and there are no retention periods for this data, we will also delete the data earlier upon request.

After completion of the application process, we will either transfer incoming applications to the personnel file or delete them after a period of 90 Days, if the applicant is not hired.

4. Data collection by third parties and data transfer to third parties

a) Data processing with our sales partners

In the course of our business activities, we cooperate in various ways with third parties who support us in the initiation, processing and ongoing support of our business contacts and contractual partners.

Some of our partners sell our products on their own responsibility but are obliged to inform us who uses our products. For this purpose, only the names of the companies are transmitted. However, as this could also involve personal data, these partners are listed here. The legal basis for the storage of the data transmitted to us by the partner is Art. 6 para. 1 f) DSGVO. Our legitimate interest lies in the recording of all customers using our products.

Furthermore, we are contractually obliged towards some partners to provide first and/or second level support, for which the partner must transmit to us the data necessary for the fulfilment of the support. The legal basis in this respect is Art. 6 para. 1 b) DSGVO.

We have engaged other partners as order processors in order to acquire potential customers for us. These partners are subject to our instructions when collecting and passing on the data to us and therefore fall within our area of responsibility for data processing.

b) Technical sales partners

In addition to the above-mentioned partners, we also use the predominantly technical service offerings of third-party companies to structure our sales and support.

For this purpose, we use the following companies for the specified purposes: Salesforce

We use Salesforce and a variety of subservices, all provided by Salesforce, Inc.

Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, United States

We use it to send our newsletter and other irregular advertising messages. Our newsletters enable us to analyse the behaviour of newsletter recipients. Among other things, it can be analyzed how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be determined whether a predefined action (e.g. purchase of a product, sharing information on social media, unsubscriptions) has taken place after clicking on the links in the newsletter. Furthermore, we can also record when a newsletter message was opened. This enables us to deliver newsletter mailings when the respective newsletter recipient is likely to be most active. The time zone of the newsletter recipient can also be taken into account. It also allows us to divide newsletter recipients into groups based on their interests. In this way, we can provide our newsletter recipients with content that is as interest-oriented as possible. We use it to manage our customers and prospective customers as CRM system .

As a platform service provider, we process the data stored in the system on our own responsibility.

However, due to the storage of the data on the systems of the provider, we have also obliged the provider as a processor to comply with data protection. Since the provider operates its servers outside the European Economic Area, we have also concluded an extended data protection agreement (DPA) with Salesforce, which also includes the standard contractual clauses of the European Commission, which serve as the legal basis for the data transfer to a third country pursuant to Art. 46 GDPR.

As part of our system configuration, we make sure that the personal data of our customers and interested parties are not processed by Salesforce for their own purposes and only for the purposes requested by us.

c) Recruiting

We rely on the services of the following companies to improve our employee acquisition: Personio

You have the opportunity to apply for vacancies in our company via our website. For optimal control of the application process, we use the services of Personio. Personio is offered and operated by Personio GmbH & Co. KG, Rundfunkplatz 4, 80335 Munich. If you would like to apply for an open position via our website, the data you provide will be recorded in an integrated screen section (frame).

By visiting our Carreer subpage, your personal access data (e.g. IP address, device used) will be processed to optimize the presentation of the website and to prepare the application process.

We process the applicant data only for the purpose and within the scope of the application process. The processing of applicant data takes place to fulfil our (pre)contractual obligations within the framework of the application process within the meaning of Art. 6 para. 1 lit. b, f DSGVO, § 26 BDSG if the data processing (e.g. in the context of legal proceedings) becomes necessary for us.

The applicant data usually includes your personal details, postal and contact addresses and the documents belonging to the application, such as cover letter, curriculum vitae and certificates. In addition, applicants may voluntarily provide us with additional information.

Insofar as special categories of personal data within the meaning of Art. 9 (1) GDPR, their processing is additionally carried out in accordance with Art. 9 para. 2 lit. b GDPR (e.g. health data, such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 (1) GDPR, their processing is additionally carried out in accordance with Art. 9 para. 2 lit. a GDPR (e.g. health data, if these are necessary for the exercise of the profession).

The deletion of the data takes place, subject to a justified revocation of the applicants, after fulfillment of purpose or after expiry of twelve months after filling the vacancy, in order to be able to answer any follow-up questions to the application.

d) Analysis services

1. Google Analytics (with anonymisation function)

We have integrated the Google Analytics component (with anonymisation function) on our website. Google Analytics is a web analysis service. Web analysis is the collection, compilation and evaluation of data about the behaviour of visitors to websites. A web analysis service collects, among other things, data on which website you came to a website from (so-called referrers), which sub-pages of the website were accessed or how often and for how long a sub-page was viewed. A web analysis is mainly used to optimise a website and to analyse the costs and benefits of internet advertising.

The operating company of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use the add-on “_gat._anonymizeIp” for web analysis via Google Analytics. By means of this add-on, your IP address of your internet connection will be shortened and anonymised by Google if access to our internet pages takes place from a member state of the European Union or from another state party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyse the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us showing the activities on our website and to provide other services in connection with the use of our website.

Google Analytics sets a cookie on your information technology system. We have already explained what cookies are in section 3. By setting the cookie, Google is enabled to analyse the use of our website. Each time you call up one of the individual pages of this website that is operated by us and on which a Google Analytics component has been integrated, theinternet browser on your information technology system is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical procedure, Google obtains knowledge of personal data, such as your IP address, which Google uses, among other things, to track the origin of visitors and clicks and subsequently to enable commission settlements.

Through this measure, personal information, for example the access time, the location from which an access originated and the frequency of your visits to our website can be stored. Each time you visit our website, your personal data, including the IP address of the internet connection you are using, will be transmitted to and stored by Google – possibly also in the United States of America. Google may pass on this personal data collected via the technical process to third parties.

As described under point 3, you can prevent the setting of cookies at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on your information technology system. In addition, a cookie already set by GoogleAnalytics can be deleted at any time via the internet browser or other software programmes.

Furthermore, you can object to the collection of data generated by Google Analytics and related to the use of this website as well as to the processing of this data by Google and prevent such processing. To do this, you must download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout. This browser add-on tells Google Analytics via JavaScript that no data and information about visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as an objection. If your information technology system is deleted, formatted orreinstalled at a later date, you must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by you or another person within your control, you may reinstall or reactivate the browser add-on.

Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html Google Analytics is explained in more detail under this link https://www.google.com/intl/de_de/analytics/.

2. Google tag manager

We use GTM on our site, a cookie-less domain that passes data to other web analytics tools. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The tool itself does not collect personal data, but ensures that other tags can collect data. If you have deactivated the use of cookies, this deactivation also applies to all other tags implemented via the GTM.

Further information on data protection can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://www.google.com/intl/de/tagmanager/use-policy.html.

e) Delivery of media content

1. Youtube

We use the provider YouTube for the integration of videos. YouTube is operated by YouTube LLC with headquarters at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc. with headquarters at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

On some of our Internet pages, we use plug-ins from the provider YouTube. When you call up the web pages of our website that are provided with such a plug-in – for example, our homepage – a connection is established to the YouTube servers and the plug-in is displayed.

This transmits to the YouTube server which of our web pages you have visited. If you are logged in as a YouTube member, YouTube assigns this information to your personal user account. When using the plug-in, such as clicking on the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your YouTube user account, as well as other user accounts of the companies YouTube LLC and Google Inc. and deleting the corresponding cookies of the companies before using our website.

For further information on YouTube and the data protection settings, please refer to the data protection information (https://policies.google.com/privacy?hl=de) and the terms of use (https://www.google.com/analytics/terms/de.html) of Google Inc.

f) Social media accounts

We use the social networks LinkedIn, Instagram, Twitter and Facebook. We have integrated links to our social network presences on our website.

LinkedIn is an internet-based social network that allows users to connect with existing business contacts and make new business contacts. The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. For data protection issues outside the USA, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible. If you follow the link to our presence on LinkedIn, LinkedIn will recognise your visit to our site and will evaluate your user data in accordance with the data protection provisions and terms and conditions. Details can be found at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.

Instagram is a platform that allows users to share photos and videos and also to redistribute such data on other social networks. The operating company of the Instagram services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA. Further information and the applicable data protection provisions of Instagram can be found at https://help.instagram.com/155833707900388 and https://help.instagram.com/519522125107875?helpref=page_content .

The short message service Twitter is a service of Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. As a user, you can share our texts and images and tell us via the short message service whether you like the content. You can also subscribe to us as the author of the content. You can find out more about how Twitter handles data protection at https://twitter.com/de/privacy.

Facebook: As a social network, Facebook enables its users to communicate with each other and interact in virtual space. It therefore also serves as a platform for the exchange of opinions and reports or enables the Internet community to provide personal or company-related information. Facebook gives its users the opportunity, among other things, to create private profiles, download photos to the network or network with acquaintances, customers or business partners via friend requests. In addition, company profiles can also be presented via the social network. The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The data controller for all persons living outside the USA and Canada isFacebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The privacy policy published by Facebook, which can be found at https://de-de.facebook.com/about/privacy/, provides information on the processing of personal data by Facebook.

5. Our handling of cookies and third-party content on the website

Our website is operated by, among other things, the use of cookies. Cookies are text files that are placed and stored on your computer system via your internet browser. Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the visited Internet pages and servers to distinguish your individual browser from other Internet browsers that contain other cookies. A specific internet browser can be recognised and identified via the unique cookie ID.

Through the use of cookies, our website can provide you with more user-friendly services that would not be possible without the cookie setting.

By means of a cookie, the information and offers on our website can be optimised in your interest. Cookies therefore enable us to recognise you. They are small files that are set when you visit websites. With their help, your internet browser remembers that you have visited our website before.

The purpose of this recognition is to make it easier for users to use our website. When you use our website, for example, you do not have to re-enter your access data each time you visit the website, because this is done by our website and the cookie stored on your computer system.

In order to provide you with the legally required options to control the use of cookies and the functions of third-party content, we have integrated a consent tool into our website, which you can use to control your individual consents.

You can reach the tool for subsequent adjustment of the settings here.

LOADING COOKIE DECLARATION...

6. What rights do you have?

The European legislator has given you a number of options within the framework of the General Data Protection Regulation to assert your rights – also against us. In order to comply with our duty to inform you in this respect, your rights are set out below:

a) Right to confirmation

You have the right to request confirmation from us as to whether your personal data is being processed. If you would like to make use of this right of confirmation, you can contact our contact person below at any time.

b) Right to information

You have the right to obtain from us at any time, free of charge, information about your stored personal data (e.g. the purpose of processing or the categories of data processed) and a copy of this information. If this is the case, you have a right of access to this personal data.

You also have the right to know whether your personal data has been transferred to a third country or to an international organisation. If this is the case, you also have the right to obtain information about the appropriate safeguards in connection with the transfer.

If you would like to make use of this right to information, you can contact our contact person below at any time.

c) Right to rectification

You have the right to request that we correct any inaccurate personal data relating to you without undue delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.

If you would like to make use of this right of rectification, you can contact our contact person below at any time.

d) Right to erasure (right to be forgotten)

You have the right to demand that we delete your personal data immediately. We are also obliged to delete personal data immediately if there is a reason that does not justify the processing of the data (e.g. personal data was collected for such purposes or otherwise processed for which it is no longer necessary).

If one of the above reasons applies and you wish to arrange for the deletion of your personal data stored by us, you can contact our contact person below at any time. He or she will ensure that your request for deletion is complied with immediately.

If we have made your personal data public and we are obliged to erase it, we shall take reasonable measures, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers who process the personal data that you have requested that we erase all links to or copies or replications of that personal data.

e) Right to restrict processing

You have the right to request us to restrict processing if one of the following conditions is met:

- The accuracy of the personal data is contested by you for a period enabling us to verify theaccuracy of the personal data. The processing is unlawful, you object to the erasure of the personal data and request instead the restriction of the use of the personal data. We no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims. You have objected to the processing pursuant to Art. 21 (1) DS-GVO and it is not yet clearwhether our legitimate grounds outweigh yours.

If one of the above conditions is met and you would like to request the restriction of your personal data stored by us, you can contact our contact person below at any time.

We will notify you of any rectification or deletion of your personal data or restriction of processing unless this proves impossible or involves a disproportionate effort. We will inform you about these recipients if you request this.

f) Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance from us, to whom the personal data has been provided.

To assert the right to data portability, you can contact our contact person below at any time.

g) Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) of the DS-GVO. This also applies to profiling based on these provisions.

We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

h) Right to withdraw consent under data protection law

You have the right to revoke your consent to the processing of personal data at any time.

If you wish to assert the revocation of consent, you can contact the following office at any time, irrespective of other revocation options provided for this purpose in the specific individual case:

Wandelbots GmbH

Rayskistraße 25

01219 Dresden

Germany www.wandelbots.com

contact@wandelbots.com

Phone: +49 351 86264000