Privacy statement

Thank you for visiting our website www.ysura.com and for your interest in our company. The protection of your personal data is an important matter to us. Personal data is information concerning personal or material relationships of a determined or determinable natural person. This includes e.g. name, address, telephone number and date of birth, but also all other data that can be attributed to a determinable person.
Since personal data enjoys special legal protection, it is only collected by us as far as this is required to provide our website and render our service. We will outline below what personal information we collect during your visit to our website and how we use this information.
Our data privacy practices are consistent with the legal regulations, in particular those of the Federal Data Protection Act (BDSG), the German Telemedia Act (TMG) and the EU General Data Protection Regulation (GDPR). We will collect, process and store your personal data exclusively insofar as this is required for the functional provision of this website and our content and services and for processing requests and, if necessary, processing orders/contracts, but only insofar as there is a legitimate interest for doing so within the meaning of Art. 6 Paragraph 1 Clause 1 f GDPR or another permission. Only when you have given your prior consent separately will your personal data also be used for additional purposes precisely determined in the consent, e.g. for the transmission of commercial information by newsletter.

1. Controller within the meaning of Art. 4 Paragraph 7 GDPR

The controller within the meaning of the GDPR and other national data protection laws of the Member States and other provisions under data protection law is:

ysura GmbH
Metzstraße 14b
81667 Munich

Email: info@ysura.com

2. Name and address of the data protection officer

Klaus Reinhard
ituso GmbH, Fraunhoferstraße 9, 85221 Dachau

Email: klaus.reinhard@ituso.de

3. Provision of the website and creation of log files

Each time our website is accessed, our system automatically records data and information of the computer system of the accessing computer. The following data are collected in doing so:

Scope of the processing of data

(1) Information about the browser type and the version used
(2) The operating system of the requesting device
(3) The IP address of the requesting device
(4) Date and time of access
(5) Websites and resources (images, files, further site content) which were requested on our website.
(6) Websites from which the system of the user reaches our website (referrer tracking)

This data is stored in the log files of our system. This data is not stored together with personal data of a specific user such that individual website visitors cannot be identified.

• Legal basis for the processing of personal
  data Art. 6 Paragraph 1 f GDPR (legitimate interest). Our legitimate interest is to ensure the following, outlined purpose is achieved.
  
• Purpose of data processing,
  Logging is carried out to maintain compatibility of our website for all visitors as far as possible and to combat misuse and for troubleshooting. To this end, it is necessary to log the technical data of the accessing computer in order to be able to respond as quickly as possible to display errors, attacks on our IT systems and/or errors in functionality on our website. We also use the data to optimise the website and to generally ensure the security of our computer systems.
  
• Duration of storage
  The aforementioned technical data is erased as soon as it is no longer required to ensure compatibility of the website for all visitors, but at the latest 3 months following access to our website.
  
• Possibility to object and rectify
  The possibilities to object and to rectify are based on the generally regulations outlined in this data privacy statement below on the right to object and the claim to erasure under data protection law.
  

4. Particular functions of the website

Our website offers you different functions during the usage of which personal data is collected, processed and stored by us. We will explain below what happens with this data:

• Form for newsletter request:
• Scope of the processing of personal data
  The data input by you for the newsletter subscription.
  
• Legal basis for the processing of personal data
  Art. 6 Paragraph 1 a GDPR (consent by clear confirmatory action or behaviour)
  
• Purpose of the data processing
  The data included in the request mask of our newsletter is used by us exclusively to send our newsletter in which we will inform you regarding all our services and our news. We will send you a confirmation email following the request containing a link that you have to click to complete the request for our newsletter (double opt-in).
  
• Duration of storage
  Our newsletter can be stopped at any time by clicking the unsubscribe link also contained in every newsletter. Your data will be deleted by us without delay after you have unsubscribed. Your data will also be deleted by us without delay in the case of an incomplete request. We reserve the right to erase it without specifying reasons and without prior or subsequent information.
  
• Possibility to object and rectify
  The possibilities to object and to rectify are based on the generally regulations outlined in this data privacy statement below on the right to object and the claim to erasure under data protection law.
  
• Contact form(s):
• Scope of the processing of personal data
  The personal data input by you into our contact forms.
  
• Legal basis for the processing of personal data
  Art. 6 Paragraph 1 a GDPR (consent by clear confirmatory action or behaviour)
  
• Purpose of data processing
  We will use the data recorded via our contact form or via our contact forms only for processing specific contact requests that arrive via the contact form.
  
• Duration of storage
  The data collected will be immediately erased after your request has been processed, insofar as there is no legal retention period.
  
• Possibility to object and rectify
  The possibilities to object and to rectify are based on the generally regulations outlined in this data privacy statement below on the right to object and the claim to erasure under data protection law.
  

5. Statistical evaluation of the visits to this website –

Webtracker

We collect, process and store the following data when this website or individual files on the website are accessed: IP address, website from which the file was accessed, name of the file, date and time of access, transfer data volume and notification regarding the success of the access (so-called web log). We use this access data exclusively in non-personalised format for the continual improvement of our website and for statistical purposes.
We also set the following webtrackers to evaluate the visits to this website:

• Google Googleadservices / Google AdWords Conversion / Google Dynamic Remarketing
  We use a webtracking service from the company, Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google Googleadservices / Google AdWords Conversion / Google Dynamic Remarketing) on our website. Google Googleadservices / Google AdWords Conversion / Google Dynamic Remarketing uses, as part of the webtracking, cookies which are stored on your computer and which allow the use of our website and your surfing behaviour to be analysed (so-called tracking). We carry out this analysis based on the tracking service of Google Googleadservices / Google AdWords Conversion / Google Dynamic Remarketing in order to constantly optimise our website and make it more accessible. As part of the use of our website, data, such as in particular your IP address and your usage activities are transferred to servers of the company Google Googleadservices / Google AdWords Conversion / Google Dynamic Remarketing and processed and stored outside of the European Union, e.g. in the USA. The legal basis for the data processing is Art. 6 Paragraph 1 a GDPR. Google Googleadservices / Google AdWords Conversion / Google Dynamic Remarketing has certified itself within the framework of the EU-US Privacy Shield Agreement; see https://www.privacyshield.gov/listThe data is erased as soon as the purpose for its collection has been fulfilled. You can find further information on the handling of transmitted data in the data privacy statement of Google Googleadservices / Google AdWords Conversion / Google Dynamic Remarketing: https://policies.google.com/privacy . You can prevent the collection of personal data (in particular your IP address) and processing of this data by deactivating the execution of script code in your browser, installing a script blocker in your browser (you can find these e.g. On www.noscript.net or www.ghostery.com ) or by activating the “Do Not Track” setting in your browser.
  
• Google Analytics
• Scope of the processing of personal data
  We use a webtracking service from the company, Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google Analytics) on our website. Google Analytics uses, as part of the webtracking, cookies which are stored on your computer and which allow the use of our website and your surfing behaviour to be analysed (so-called tracking). We carry out this analysis based on the tracking service of Google Analytics in order to constantly optimise our website and make it more accessible. When you use our website, data, such as in particular your IP address and your user activities are transferred to Google Ireland Limited servers and processed and stored outside of the European Union, e.g. in the USA.
  The EU Commission has determined that there may be a reasonable level of data protection in the USA when the data processing company is subject to the US-EU Privacy Shield Agreement and the data export to the USA was designed permissibly in this manner. By activating IP anonymisation within Google Analytics tracking codes of this website, your IP address will be anonymised by Google Analytics prior to transfer. This website uses a Google Analytics tracking code, which has been expanded by the operator gat._anonymizeIp(); in order to allow only anonymised recording of IP addresses (so-called IP masking).
  
• Legal basis for the processing of personal data
  Art. 6 Paragraph 1 a GDPR (consent), either as part of the registration with Google (opening a Google account and acceptance of the data privacy notices implemented there) or, if you have not registered with Google, by explicit consent when opening our website.
  
• Purpose of data processing
  Google will use this information on our behalf for evaluating your visit to this website in order to compile reports on the website activities and to render additional services to us that are associated with the website use and the Internet use. The IP address transmitted by your browser in the context of Google Analytics is not combined with other Google Ireland Limited data.
  
• Duration of storage
  Google will store the data relevant for providing the webtracking for as long as is necessary in order to fulfil the booked web service. Data collection and storage is anonymised. As far as there are personal references, the data will be immediately erased, provided this does not fall under any legal retention obligations. In any case, the deletion takes place following expiry of the retention obligation.
  
• Possibility to object and rectify
  You can prevent collection by and sharing of personal data (in particular your IP address) with Google and processing of this data by Google by deactivating the execution of script code in your browser, installing a script blocker in your browser (you can find these e.g. on www.noscript.net or www.ghostery.com) or by activating the “Do Not Track” setting in your browser. You can also prevent Google recording the data (including your IP address) generated by the Google cookie and relating to your use of the website as well as the processing of this data by Google by downloading and installing the browser plug-in available with the following link (http://tools.google.com/dlpage/gaoptout?hl=de ). You can find Google’s safety and data privacy principles at https://policies.google.com/privacy
  

6. Engaging external web services and processing of data outside of the EU

We use active Java Script content from external providers, so-called web services on our website. By accessing our website, these external providers may receive personal information concerning your visit to our website. Data may be processed outside of the EU in doing so. You can prevent this by installing a Java Script blocker such as e.g. the browser plug-in ‘NoScript’ (www.noscript.net) or by deactivating Java Script in your browser. Doing so may result in functional limitations on websites that you visit.
We use the following external web services:

• Doubleclick
  A web service from the company, Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Doubleclick) is loaded on our website. We use this data to ensure the complete functionality of our website. In this context, your browser will possibly transmit personal data to Doubleclick. The legal basis for the data processing is Art. 6 Paragraph 1 f GDPR. The legitimate interest is an error-free functioning of the website. Doubleclick has certified itself within the framework of the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). The data is erased as soon as the purpose for its collection has been fulfilled. You can find additional information on the handling of the transferred data in the Doubleclick data privacy statement: https://policies.google.com/privacy . You can prevent the recording and the processing of your data by Doubleclick by deactivating the execution of script code in your browser or by installing a script blocker in your browser (you can find these e.g. at www.noscript.net or www.ghostery.com).
  
• Google
  A web service from the company, Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google) is loaded on our website. We use this data to ensure the complete functionality of our website. In this context, your browser will possibly transmit personal data to Google. The legal basis for the data processing is Art. 6 Paragraph 1 f GDPR. The legitimate interest is an error-free functioning of the website. Google has certified itself within the framework of the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). The data is erased as soon as the purpose for its collection has been fulfilled. You can find further information on the handling of transmitted data in the Google data privacy statement: https://policies.google.com/privacy . You can prevent the recording and the processing of your data by Google by deactivating the execution of script code in your browser or by installing a script blocker in your browser (you can find these e.g. at www.noscript.net or www.ghostery.com).
  
• Google Maps
  A web service from the company, Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google Maps) is loaded on our website. We use this data to ensure the complete functionality of our website. In this context, your browser may transmit personal data to Google Maps. The legal basis for the data processing is Art. 6 Paragraph 1 f GDPR. The legitimate interest is an error-free functioning of the website. Google Maps has certified itself within the framework of the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). The data is erased as soon as the purpose for its collection has been fulfilled. You can find further information on the handling of transmitted data in the Google Maps data privacy statement: https://policies.google.com/privacy . You can prevent the recording and the processing of your data by Google Maps by deactivating the execution of script code in your browser or by installing a script blocker in your browser (you can find these e.g. at www.noscript.net or www.ghostery.com).
  
• Google Video
  A web service from the company, Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google Video) is loaded on our website. We use this data to ensure the complete functionality of our website. In this context, your browser will possibly transmit personal data to Google Video. The legal basis for the data processing is Art. 6 Paragraph 1 f GDPR. The legitimate interest is an error-free functioning of the website. Google Video has certified itself within the framework of the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). The data is erased as soon as the purpose for its collection has been fulfilled. You can find further information on the handling of transmitted data in the Google Video data privacy statement: https://policies.google.com/privacy . You can prevent the recording and the processing of your data by Google Video by deactivating the execution of script code in your browser or by installing a script blocker in your browser (you can find these e.g. at www.noscript.net or www.ghostery.com).
  
• Google Apis
  A web service from the company, Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google Apis) is loaded on our website. We use this data to ensure the complete functionality of our website. In this context, your browser will possibly transmit personal data to Google Apis. The legal basis for the data processing is Art. 6 Paragraph 1 f GDPR. The legitimate interest is an error-free functioning of the website. Google Apis has certified itself within the framework of the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). The data is erased as soon as the purpose for its collection has been fulfilled. You can find further information on the handling of transmitted data in the Google Apis data privacy statement: https://policies.google.com/privacy . You can prevent the recording and the processing of your data by Google Apis by deactivating the execution of script code in your browser or by installing a script blocker in your browser (you can find these e.g. at www.noscript.net or www.ghostery.com).
  
• gstatic
  A web service from the company, Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: gstatic) is loaded on our website. We use this data to ensure the complete functionality of our website. In this context, your browser will possibly transmit personal data to gstatic. The legal basis for the data processing is Art. 6 Paragraph 1 f GDPR. The legitimate interest is error-free functioning of the website. Gstatic has certified itself within the framework of the EU-US Privacy Shield Agreement; see https://www.privacyshield.gov/listThe data is erased as soon as the purpose for its collection has been fulfilled. You can find further information on the handling of transmitted data in the gstatic data privacy statement: https://policies.google.com/privacy . You can prevent the recording and the processing of your data by gstatic by deactivating the execution of script code in your browser or by installing a script blocker in your browser (you can find these e.g. at  www.noscript.net  or www.ghostery.com).
  
• Youtube
  A web service from the company, Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Youtube) is loaded on our website. We use this data to ensure the complete functionality of our website. In this context, your browser will possibly transmit personal data to Youtube. The legal basis for the data processing is Art. 6 Paragraph 1 f GDPR. The legitimate interest is an error-free functioning of the website. Youtube has certified itself within the framework of the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). The data is erased as soon as the purpose for its collection has been fulfilled. You can find further information on the handling of transmitted data in the Youtube data privacy statement: https://policies.google.com/privacy . You can prevent the recording and the processing of your data by Youtube by deactivating the execution of script code in your browser or by installing a script blocker in your browser; you can find these e.g. at www.noscript.netor www.ghostery.com
  
• ytimg
  A web service from the company, Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: ytimg) is loaded on our website. We use this data to ensure the complete functionality of our website. In this context, your browser will possibly transmit personal data to ytimg. The legal basis for the data processing is Art. 6 Paragraph 1 f GDPR. The legitimate interest is error-free functioning of the website. ytimg has certified itself within the framework of the EU-US Privacy Shield Agreement (see  https://www.privacyshield.gov/list). The data is erased as soon as the purpose for its collection has been fulfilled. You can find further information on the handling of transmitted data in the ytimg data privacy statement: https://policies.google.com/privacy . You can prevent the recording and the processing of your data by ytimg by deactivating the execution of script code in your browser or by installing a script blocker in your browser (you can find these e.g. at www.noscript.net or  www.ghostery.com ).
  
• ggpht.com
  A web service from the company, Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: ggpht.com) is loaded on our website.We use this data to ensure the complete functionality of our website. In this context, your browser will possibly transmit personal data to ggpht.com. The legal basis for the data processing is Art. 6 Paragraph 1 f GDPR. The legitimate interest is error-free functioning of the website. ggpht.com has certified itself within the framework of the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). The data is erased as soon as the purpose for its collection has been fulfilled. You can find further information on the handling of transmitted data in the ggpht.com data privacy statement: https://policies.google.com/privacy . You can prevent the recording and the processing of your data by ggpht.com by deactivating the execution of script code in your browser or by installing a script blocker in your browser (you can find these e.g. at  www.noscript.net or www.ghostery.com).
  
• madmini.com
  A web service from the company, Go Daddy Operating Company, LLC, 14455 N. Hayden Road, 85254 Scottsdale, USA (hereinafter: madmini.com) is loaded on our website. We use this data to ensure the complete functionality of our website. In this context, your browser will possibly transmit personal data to madmini.com. The legal basis for the data processing is Art. 6 Paragraph 1 f GDPR. The legitimate interest is error-free functioning of the website. madmini.com has certified itself within the framework of the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). The data is erased as soon as the purpose for its collection has been fulfilled. You can find further information on the handling of transmitted data in the madmini.com data privacy statement: https://de.godaddy.com/agreements/privacy . You can prevent the recording and the processing of your data by madmini.com by deactivating the execution of script code in your browser or by installing a script blocker in your browser (you can find these e.g. at www.noscript.net or www.ghostery.com).
  
• website-check.de
  An approval seal from the company, Website-Check GmbH, Beethovenstraße 24 in 66111 Saarbrücken, Germany (hereinafter: website-check.de) is loaded on our site. We incorporate this approval seal into our site to indicate that we take data protection seriously. The incorporation of the Website-Check approval seal means that non-personal data are transferred to Website-Check GmbH as the issuer of the approval seal. In this connection, the data only contains your IP address in order to deliver the image file of the approval seal. Your IP address has no personal reference for Website-Check GmbH. The legal basis for the data processing is Art. 6 Paragraph 1 f GDPR (legitimate interest). The legitimate interest is to enable the error-free display of the Website-Check approval seal on the website. You can find further information on the handling of transmitted data in the website-check.de data privacy statement: https://www.website-check.de/datenschutzerklaerung/.You can prevent the loading of the Website-Check approval seal and therefore the transfer of your IP address (anonymised for Website-Check GmbH) to Website-Check GmbH by deactivating the execution of script code of Website-Check GmbH in your browser or by installing a script blocker in your browser (you can find these e.g. at www.noscript.net or www.ghostery.com).
  

7. Information concerning the use of cookies

• Scope of the processing of personal data
  We use cookies on different sites in order to enable the use of determined functions is loaded on our website. Cookies are small text files which your browser can store on your computer. These text files contain a characteristic string which enables a unique identification of the browser when the website is accessed again. The process of storing a cookie file is also called ‘setting a cookie’.
  
• Legal basis for the processing of personal data
  Art. 6 Paragraph 1 f GDPR (legitimate interest). Our legitimate interest is to maintain the full functionality of our website, increase operability and enable a more tailored customer contact. We can identify Individual website visitors using cookie technology only if the website visitor has previously provided us with corresponding personal data based on a separate consent.
  
• Purpose of the data processing
  Cookies are set by our website in order to maintain the full functionality of our website and improve operability. Cookie technology also allows us to recognise individual visitors using pseudonyms, e.g. an individual, random ID so that we can provide more tailored services.
  
• Duration of storage
  Our cookies are stored in your browser until erasure, or, if it is a session cookie, until the session has ended.
  
• Possibility to object and rectify
  You can set your browser yourself at your discretion such that you can generally prevent cookies being set. You can decide on a case-by-case basis concerning the acceptance of cookies or to in principle accept cookies. Cookies can be used for different purposes, e.g. to detect that your PC has already had a connection to our web offering (permanent cookies) or to ultimately store viewed content (session cookie). We set cookies to provide you with increased user comfort. In order to use our comfort function, we recommend that you allow the acceptance of cookies for our website.
  The possibilities to object and to rectify are otherwise based on the general regulations outlined in this data privacy statement below on the right to object and the claim to erasure under data protection law.

8. Data security and data protection, communication by e-mail

Your personal data is protected by technical and organisational measures during collection, storage and processing such that they are not accessible to third parties. In the case of unencrypted communication by email, complete data security cannot be ensured by us on the transfer path to our IT systems such that we recommend encrypted communication or mail in the case of information with a high confidentiality requirement.

9. Revocation of consent – data access and modification request – erasure and locking of data

You have the right to free access to your stored data at reasonable intervals and a right to, at any time, rectify, lock or erase your data. Your data will be erased by us upon first request, if there are no legal regulations opposing this. You may at any time revoke consent granted to us to use your personal data. You may, at any time, send access, erasure and rectification requests concerning your data and also suggestions to the following address:

Ysura GmbH
Metzstraße 14b
81667 Munich

Email: info@ysura.com

10. Right to data portability

You have a right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You can also request us to transmit this data to a third party upon your first instruction and without delay, insofar as the processing is based on consent according to Art. 6 Paragraph 1 a GDPR or Art. 9 Paragraph 2 a GDPR or on a contract according to Art. 6 Paragraph 1 b GDPR and the processing is carried out by us as part of automatic data processing.
When exercising this right to data portability, you also have the right for the personal data affecting you to be transferred directly to another controller, as far as this is technically viable. Freedoms and rights of other individuals may not be impaired by doing so.
The right to data portability does not apply for processing of personal data which is required to perform a task that is in the public interest or takes place in exercising public authority which was transferred to the controller.

11. Right to complain to the supervisory authorities according to Art.77 I

GDPR

If you have the suspicion that your data is being processed illegally on our website, you may, at any time, seek judicial clarification for the issue. Irrespective of this, you have the option of contacting a supervisory authority. The right to complain is available to you in the EU Member State of your residence, your workplace and/or the location of the supposed violation, i.e. you may choose the supervisory authority whom you contact at the above-mentioned locations. The supervisory authority, to whom the complaint was made, will inform you concerning the status and the result of your submission, including the option of legal remedy according to Art. 78 GDPR.

Created by:
© IT-Recht-Kanzlei DURY – www.dury.de
© Website-Check GmbH – www.website-check.de

‍

‍