Protecting your personal data is important to us. Below, we inform you about which data we collect, how we process it and which rights you have.
Information about the controller
The controller responsible for the data processing described here is:
IRS Systementwicklung GmbH
Pfaffenthanner Weg 5
93179 Brennberg, Germany
Phone: +49 (0) 9484/9500-0
E-mail: info@irs.systems
The controller is the natural person or legal entity that, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, e-mail addresses).
Data protection officer & questions about data protection
For questions or concerns regarding data protection, you can reach our data protection team at datenschutz@irs.systems.
Alternatively, you can contact our data protection officer:
Daniel Steffen
NOVINET GmbH & Co. KG
datenschutzbeauftragter@novidata.de
1. Purpose and scope of data processing
We process personal data to provide our software products.
Registration and use: Using our software requires a user account. For this, we collect, among other things, your name, your e-mail address and other required details.
License check and connection to AWS: Each time the application starts, it connects to our server at Amazon Web Services (AWS) to check the license. The following data is transmitted:
• E-mail
• License key
• IP address
• Timestamp
• Device name
Processing this data is necessary to ensure proper use of the software and to prevent license misuse.
Support and error analysis: For support requests or error analysis, we may collect relevant log data in order to resolve problems.
Payment processing: If the software is subject to a charge, payment data is processed by our payment service provider.
2. Legal basis for processing
Personal data is processed on the following legal bases:
• Performance of a contract (Art. 6(1)(b) GDPR): processing is necessary to provide the software.
• Legitimate interest (Art. 6(1)(f) GDPR): license checks and security measures.
• Consent (Art. 6(1)(a) GDPR): where required, e.g. for marketing or optional features.
3. Data storage
Personal data is only stored for as long as necessary for the respective purpose:
• License data: as long as the license is active.
• User data: as long as the user account exists.
• Payment data: in accordance with statutory retention periods.
Once these periods have expired, the data is deleted or anonymised.
4. Recipients of the data
We use the following third-party providers for processing:
• Amazon Web Services (AWS): hosting of the servers that store and check licenses
• Payment service providers: processing of transactions
• Support service providers: handling of support requests
Data processing agreements pursuant to Art. 28 GDPR are in place with these providers.
5. Transfers to third countries
If data is processed outside the EU (e.g. by AWS in the USA), this is done on the basis of appropriate safeguards such as the EU Standard Contractual Clauses (SCCs).
6. Your rights
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of the processing carried out until the withdrawal remains unaffected.
Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)
IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. THE LEGAL BASIS ON WHICH ANY PROCESSING IS BASED IS STATED IN THIS PRIVACY NOTICE. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work or the place of the alleged violation. This right exists without prejudice to any other administrative or judicial remedies.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done where technically feasible.
Information, rectification and erasure
Within the scope of the applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients and the purpose of the processing, and, where applicable, the right to have this data rectified or erased. Please contact us at any time with these or other questions about personal data.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. Please contact us at any time to do so. The right to restriction of processing applies in the following cases:
• If you dispute the accuracy of the personal data we have stored, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was or is unlawful, you can request the restriction of processing instead of erasure.
• If we no longer need your personal data but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of processing instead of erasure.
• If you have lodged an objection pursuant to Art. 21(1) GDPR, your interests and ours must be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data – apart from being stored – may only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.