We at PPI AG and our subsidiaries take the protection of your personal data seriously and would like to inform you about the collection, processing and use of your data in our company. Details about our subsidiaries can be found here: https://www.ppi-group.eu/en/about-ppi/corporate-group/subsidiaries.html

1. General information	This general section provides you with general information about your rights regarding the protection of your personal data as well as the contact information to us. This part is always relevant for you.
2. Visiting our websites	This section provides details about the process data using this website.
3. Business customers and -partner	This part is relevant for you if you work with us as a customer, service provider, supplier or similar partner.

1 General informationen

1.1 Data protection officer and controller

Controller

PPI AG
Moorfuhrtweg 13
22301 Hamburg
+49 40 227 433 0
info@ppi.de
www.ppi-group.eu

Data protection officer

If you have questions regarding the processing of your personal data, you can contact our data protection officer directly. Our data protection officer is also available to you should you wish to request information, request that an action be taken or make a complaint:

PPI AG
Datenschutzbeauftragter
Moorfuhrtweg 13
22301 Hamburg
datenschutz@ppi.de

1.2 Your rights

1.2.1 Right to access information

According to Article 15 GDPR, you always have the right to receive information about the origin, recipient, purpose and duration of data processing of the data retained by us in respect of you. You can submit a request by mail or e-mail to the addresses provided above.

1.2.2 Right to request the rectification of inaccurate data

You have the right to demand the rectification of your personal data without undue delay if it is inaccurate (Article 16 GDPR). In this regard, please contact your contact persons at our company or use the contact addresses indicated above.

1.2.3 Right to erasure

You have a right to the erasure (“right to be forgotten”) of your personal data without undue delay if one of the legal grounds in terms of Article 17 GDPR applies. Such grounds are, for example, if the personal data are no longer necessary for the purposes for which it was originally processed, if you have withdrawn your consent and there is no other legal basis for the processing, if you object to the processing and there are no overriding reasons for processing. In order to assert your right to erasure, please contact us via the contact addresses provided above.

1.2.4 Right to data portability

You have the right to data portability in terms of Article 20 of the GDPR. You have the right to receive the data concerning you, which you provided us with, in a conventional, structured and machine-readable format and to have these data transferred to another controller, such as another service provider. This is subject to the conditions that the processing is based on consent or on a contract and can be carried out using automated procedures. In order to assert your above-mentioned right, please contact us via the contact addresses provided above.

1.2.5 Right to the restriction of processing

You have the right to restrict processing if one of the conditions applies in accordance with the provisions of Article 18 GDPR. Thereafter, the restriction of processing may be required, in particular, if the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of the use of the personal data instead or if the data subject objects to the processing pursuant to Article 21 para. 1 GDPR pending verification of whether our legitimate grounds override your rights. In order to assert your above-mentioned right, please contact us via the contact addresses provided above.

1.2.6 Right to object

You have the right to object, at any time, in terms of Article 21 GDPR on grounds relating to your particular situation to the processing of your personal data which is based i. a. on Art. 6 para. 1 lit. (e) or (f) GDPR. In which event, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is for the purpose of asserting, pursuing or defending a legal claim. In order to assert your above-mentioned right, please contact us via the contact addresses provided above.

1.2.7 Right to lodge a complaint

You have the right to lodge a complaint in terms of Article 77 GDPR with the competent supervisory authority if you are of the opinion that the processing of your personal data is unlawful:

Free and Hanseatic City of Hamburg
The Hamburg Commissioner for Data Protection and Freedom of Information

2 Visit our support and download website

2.1 Provision of the website

When you visit our websites (download.ppi.de), our web servers automatically save the following data:

Information about the browser type and version used
The operating system of the user
The IP address of the user
Date and time of when the site was accessed
External websites from which the system of the user accesses our website

The data are saved to ensure the functionality of the website. The data are also used to optimise the website and to safeguard the security of our IT systems. We also process these data to detect and track misuse. In this regard, the legal basis is Art. 6 para. 1 lit. (f) GDPR. Our legitimate interest in processing the data is to ensure that our website functions properly and to safeguard the transactions processed by means thereof.

Your personal data will however be processed if you provide it to us, for example, in the context of a request or placing an order for information material or registering for a newsletter. The legal basis in this respect is Art. 6 para. 1 lit. (b) GDPR or Art. 6 para. 1 lit. (a) GDPR.

The data are stored in the log files of our servers for 30 days and then deleted automatically. In this regard, the data are not evaluated for marketing purposes.

2.2 Automated data collection on our website

2.2.1 Technically required cookies

We use cookies on our websites. Cookies are small text files that are assigned to the browser you are using and stored on your hard disk by means of a specific string of characters, and through which the body that sets the cookie receives certain information. Cookies cannot run programs or transmit viruses to your computer and therefore cannot cause any damage. They serve to make the Internet offer as a whole more user-friendly and effective, i.e. more pleasant for you. Cookies may contain data that makes it possible to recognise the device used.

These are mandatory in order to keep your login session alive and to download the software.

In some cases, cookies only contain information on certain settings that cannot be related to a specific person. However, cookies cannot directly identify a user. A distinction is made between session cookies, which are deleted again as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. With regard to their function, a distinction is made between cookies:

Technical cookies: These are mandatory in order to navigate the website, use basic functions and ensure the security of the website. They do not collect information about you for marketing purposes, nor do they store which websites you have visited.
Performance cookies: These collect information about how you use our website, which pages you visit and, for example, whether errors occur during the website use. They do not collect any information that could identify you – all information collected is anonymous and is only used to improve our website and find out what interests our users.

2.3 Contact

If you contact us (e.g. by e-mail or telephone), the information of the inquiring persons is processed. As a matter of course, we will use the personal data transmitted to us in this way exclusively for the purpose you provide it for when contacting us.

The answering of requests in the context of contractual or pre-contractual relationships is carried out to fulfil our contractual obligations or to answer (pre-)contractual requests (Art. 6 para. 1 sent. 1 lit. (b) GDPR) and otherwise on the basis of legitimate interest in answering the requests (Art. 6 para. 1 sent. 1 lit. (f) GDPR).

2.4 Data deletion and storage period

Your data will only be stored in our systems for as long as this is permissible under applicable law, in particular as long as this is necessary for the performance of the contract in connection with the applicable retention obligations. Furthermore, we will delete your data if you request this or revoke your consent to the processing. In these cases, we will check whether the data can be deleted or only a restriction of processing can be made due to legal requirements.

2.5 Data Security

We protect your data using technological and organisational security measures to prevent accidental or wilful manipulation, loss, destruction or access by unauthorised persons. Our security measures, such as data encryption, are regularly enhanced in accordance with the newest technological developments.

3 Business customers and partners

If you or your organisation have a business relationship with us (in particular customers, prospective customers, partners, service providers and suppliers), we retain the relevant data about you. We would like to inform you about this in the following.

3.1 Scope of the data collected

As a matter of principle, we only process data that we receive from you directly or from your employer. In exceptional cases we receive data about you from third parties. This is the case, for example, if a contractual service is provided to you together with a business partner and you have transmitted your data to them.

The data processed by us especially includes the contact data, such as your name, company, position, address, telephone number, e-mail address, as well as information about the respective business relationship, such as the contractual relationship and its processing (current and completed orders, invoices, payments).

3.2 Purpose and legal basis of data processing

Your data are processed for different purposes and the data processing is based on various legal grounds. Insofar as the processing of your personal data is necessary for the initiation or implementation of a contractual relationship or in the context of the implementation of pre-contractual measures, processing is lawful pursuant to Art. 6 para. 1 lit. (b) GDPR. The processing includes in particular the communication for the planning, implementation, administration and billing of the contractually defined services. If necessary and required by law, we process your data beyond the actual contractual purposes for the fulfilment of legal obligations pursuant to Art. 6 para. 1 lit. (c) GDPR, e.g. for the fulfilment of retention obligations pursuant to the Commercial Code and the Fiscal Code of Germany.

If you give us your express consent to process personal data for specific purposes (e.g. transfer to third parties, evaluation for marketing purposes or advertising), this processing is lawful on the basis of your consent pursuant to Art. 6 para. 1 lit. (a) GDPR. Consent that was given can be revoked any time with effect for the future.

In addition, processing may be carried out to protect our legitimate company interests, the interests of our customers and, if applicable, the interests of third parties in accordance with Art. 6 para. 1 lit. (f) GDPR. This concerns, for example, the following cases: Communication with business partners, customers, suppliers, direct advertising for similar products within the scope of our business relationships, ensuring IT security and IT operations, for conducting customer satisfaction surveys, for fulfilling accountability and/or verification obligations towards our business partners / customers or supervisory authorities as well as for the prevention and clarification of criminal offences / regulatory offences. If necessary, we will inform you separately, stating the legitimate interest, insofar as this is required by law.

3.3 Duration of storage

3.4 Disclosure of the data

We only disclose your personal data within our company to those areas and persons who need these data to fulfil contractual and legal obligations or to implement our legitimate interests.

The use of service providers as well as contractual and legal obligations require the disclosure of your data to the following categories of public or internal bodies as well as external service providers:

Business partners/service providers to whom the disclosure of data is necessary for the fulfilment of tasks such as our ordering parties/customers, payment service providers/banking institutions, postal/parcel services, external consultants, IT service providers, other processors, etc.
Statutory auditor, tax consultant, lawyer
Authorities in the course of fulfilling legal obligations to provide information or evidence (e.g. tax authorities, police and public prosecutors, supervisory authorities)
Other third parties, provided you have given us permission to transfer data, e.g. partner companies.
Subsidiaries of PPI AG

When using external service providers, we ensure that necessary contractual agreements are concluded, that the processing is carried out in accordance with the applicable data protection regulations and that the protection of the rights of the data subject is guaranteed. Under no circumstances will the collected data be sold. Our employees are obliged to maintain and safeguard the confidentiality of the personal data provided to us.

As a matter of principle, there is no regular transfer of personal data to a third country (states outside the European Union [EU] or the European Economic Area [EEA]) or an international organisation. However, we may use service providers who process data outside the EU / EEA. In these cases, we will ensure that an adequate level of data protection comparable to the standards within the EU is established at the recipient before transferring your personal data. This can be achieved, for example, through standard EU contracts or binding corporate rules or special agreements to the rules of which the company may be subject. Furthermore, there may be cases in which a transfer is necessary for the fulfilment of the contract or, at your request, for the implementation of pre-contractual measures, the transfer is required by law or you have given us your consent.

Status and amendment of the data protection information

Please note that we update this data protection policy from time to time so that it always complies with the most recent legal requirements and covers all our content. The latest version applies subject to the following update notice.

Your statutory rights to information, rectification, restriction, erasure and to raise an objection shall remain unaffected by any such amendment.

Last update: 04.05.2023

Data protection notice