Data protection is an important concern of NAVAX Software GmbH, Landsberger Straße 300, 80687 Munich. The processing of our customers' data is carried out exclusively in compliance with the applicable data protection regulations (e.g. GDPR, BDSG-new).
We collect and process personal data if you provide us with this data (e.g. by registering on the website, contact requests, etc.) and we are authorized to collect, use and process it on the basis of your consent or on the basis of a statutory provision.
If we receive personal data from you from other companies, you will be informed of this as soon as possible, at the latest when you first contact us. This data is also only stored and processed on the basis of the statutory provisions.
1. Your personal data
Personal data is all information that relates to an identified or identifiable person. This includes, for example, your name, telephone number, postal address and e-mail address.
2. Scope of data collection, processing and use
The processing of personal data is necessary to achieve the above-mentioned purposes, including the execution of the (contractual) business relationship with you. Unless expressly stated otherwise, the legal basis for data processing is Article 6 (1) (b) and (f) of the General Data Protection Regulation or your express consent pursuant to Article 6 (1) (a) of the General Data Protection Regulation.
If the above data is to be further processed for a purpose other than the original purpose of collection, you will be informed of this prior to further processing. In this way, you have the opportunity to object to the processing of your data for a different purpose.
Data of business customers:
When you visit this website, we collect and store your IP address. This data is collected and stored for purely technical reasons, for example to eliminate malfunctions. No further use or evaluation of this data takes place.
In addition, we only collect, process and use your personal data if you have given your express consent to this.
You can object to the use of cookies for reach measurement and advertising purposes via the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/) and additionally the US website (https://www.aboutads.info/choices) or the European website (https://www.youronlinechoices.com/uk/your-ad-choices/).
3. Cookies
Cookies are pieces of information that are transferred from our web server or third-party web servers to the user's web browser and stored there for later retrieval. Cookies can be small files or other types of information storage. We only use cookies with the explicit consent of the user (opt-in).
We use functional cookies to enable certain functions of the website, such as saving personalized cookie settings. These cookies cannot store any other data.
Name: Cookiesettings
Purpose: Saving cookie settings
Cookie name: cookiesettings
Duration: 10 days
Users are informed about the use of cookies in the context of pseudonymous reach measurement as part of this privacy policy.
We only use cookies with the explicit consent of the user (opt-in). Once consent to the use of cookies has been given, the data subject can object to the setting of cookies by our website at any time by making the appropriate setting. The corresponding settings can be found in the footer of the website under "Cookie settings". Furthermore, cookies that have already been set can be deleted at any time via an internet browser or other software programs. This is possible in all common Internet browsers. If you deactivate the setting of cookies in the Internet browser you are using, you may not be able to use all the functions of our website to their full extent.
You can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies.
4. Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are
This data is not merged with other data sources.
This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website - for this purpose, the server log files must be recorded.
5. Reach measurement
As part of our Internet service and in order to further improve our website for you and to adapt it even more to the needs of users, we use the open source tool "Matomo" for the statistical evaluation of website usage (further information can be found at: https://www.matomo.org/. The information obtained with this tool is not passed on to third parties.
Matomo regularly uses cookies for this purpose (see above). Matomo stores the IP addresses in anonymized form. Anonymization takes place immediately after the IP address is processed and before it is stored on our web server. This is done by shortening the IP address by the last octet in accordance with the resolutions of the data protection conference of the data protection supervisory authorities of the federal and state governments (DSK). This means that you as the user always remain anonymous.
To ensure this, the tool is used in a so-called "self-hosting" procedure, i.e. the evaluation takes place exclusively on our own systems in Germany (see above) and the information generated by the cookie (or equivalent) does not contain any personal data, but only statistical data in anonymized and summarized form, e.g. browser type and version:
Anonymous reach measurement using Matomo is always activated when you visit our website. However, you can fundamentally object to this anonymous measurement.
Possibility of objection (opt-out): You can object to the processing of your data by Matomo at any time with effect for the future by clicking on the checkbox below. In this case, a so-called "opt-out cookie" will be stored in your browser, which means that Matomo will no longer collect any session data. However, if you delete your cookies in general, this will result in this opt-out cookie also being deleted and you will therefore have to reactivate it if in doubt; this is due to the technology.
6. Mapbox API for map display
This website uses - after your consent by opt-in - the Mapbox API, a map service of Mapbox Inc. to display an interactive map. By using Mapbox, information about your use of this website (including your IP address) may be transmitted to a Mapbox server in the USA and stored there. Mapbox is operated by Mapbox Inc, 740 15th St Nw Suite 500 Washington, DC 20005 United States, USA.
The terms of use and privacy policy for Mapbox can be found at https://www.mapbox.com/legal/privacy/.
7. YouTube
Various videos from the YouTube.com platform are embedded on this website.
As soon as you visit one of our pages on which a YouTube video is embedded, a connection to the YouTube servers is established. This enables data to be exchanged between you and YouTube. If you are logged into your YouTube account, YouTube can usually assign your interactions on this website to your profile with the help of cookies. The data collected by YouTube's cookies is stored on the servers of Google, the owner of YouTube.
If you are not logged into a Google account or a YouTube account, Google stores data with a unique identifier that is linked to your device, browser or app. This means that a lot of interaction data cannot be saved, as fewer cookies are set.
The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
If you do not allow access to YouTube in the cookie settings on our website, the use of YouTube will be prevented and no data will be transmitted to YouTube.
You can find further information at: https://policies.google.com/privacy
8. MyFonts
This site uses so-called web fonts from MyFonts Inc, 600 Unicorn Park Drive, Woburn, Massachusetts 01801 USA (hereinafter: MyFonts) for the uniform display of fonts. These are fonts that are loaded into your browser when you visit our website in order to ensure a uniform typeface when displaying the website. This involves a connection to MyFonts servers.
MyFonts also processes data in the USA, among other places, and undertakes to comply with the EU level of data protection when processing relevant data outside the EU. The resolution and clauses can be found at this link: https://germany.representation.ec.europa.eu/index_de.
More information about the data processed through the use of MyFonts can be found in the privacy policy: https://www.monotype.com/legal/privacy-policy.
The use of fonts is based on our legitimate interest in a uniform presentation of our website (Art. 6 para. 1 lit. f GDPR).
9. Use of contact forms
You can contact us directly using the contact forms provided on this website. We collect, process and use the information you provide via a contact form exclusively for the processing of your specific request.
10. Registration for the newsletter and information distribution list
We send registered interested parties general newsletters and/or information on certain current NAVAX Software topics (e.g. press releases, product information, information on legal and regulatory topics) at regular intervals. If you have registered for the newsletter and information distribution list, we collect and process your personal data exclusively for the purpose of sending this information or the newsletter. You can register for our newsletter and information distribution list via the "Register" link on this website.
If you revoke your consent to receive advertising with effect for the future, your data will be deleted immediately. You can do this at any time, for example by unsubscribing from our newsletter and information distribution list via the "Unsubscribe" link contained in one of the newsletters.
11. Right of access and rectification
Rights of data subjects:
Right to information, rectification, erasure or restriction of processing of your personal data, right to object and right to data portability
Upon request, we will inform you in writing, in accordance with the applicable law, whether and which personal data we store in our company. If you are registered as a user yourself, we offer you the opportunity to view your data yourself and to change and delete it if necessary. If, despite our company's efforts to ensure data security and accuracy, incorrect information has been stored, we will correct it at your request.
You also have the right to request the restriction of the processing of personal data by our company. In addition, you may request to receive the data you have provided to our company in a structured, commonly used and machine-readable format. You can also object to the processing of personal data by our company.
You also have the right to request the erasure of your personal data, provided that this does not conflict with statutory retention periods. We will delete the data if we no longer need it for the purpose for which we collected and processed it, or if you withdraw your consent and there is no other legal basis for the further processing of your data. In addition, we will erase this data if the processing was unlawful for reasons unknown to us or if you have objected to the processing and there are no overriding legitimate interests for the processing. Your data will also be deleted if we are legally obliged to do so. Our company has also implemented technical measures to inform all recipients of your data of your request for erasure or rectification. This only applies in the event that we have disclosed or made this data public. All links, copies and replications of your personal data will be deleted.
If you have consented to the processing of your personal data, you have the right to withdraw your consent at any time with effect for the future. Withdrawal of consent does not make data processing unlawful for the past.
The transfer of data to our company is voluntary. However, this data is required for the further conclusion of the contract or to answer your inquiries. If you do not wish to provide your data, the contract may not be concluded or your inquiries may not be answered. The provision of the data is necessary for the conclusion of the contract.
You can send your request to our data protection officer at the e-mail address g.kohl@navax.com.
You also have the right to complain to the competent supervisory authority about data processing by our company. The data protection authority responsible for our company is: Landesamt für Datenschutzaufsicht, Promenade 27 (Schloss), 91522 Ansbach, Germany, Web: www.lda.bayern.de
Adjustments
We reserve the right to update this privacy policy from time to time.
Status: February 2024