Privacy Policy

Personal data such as names, addresses, email addresses and telephone numbers are always processed in accordance with the General Data Protection Regulation, as well as with the country-specific data protection regulations relevant to us. This Privacy Policy contains information about the type of data that we collect, the extent to which we collect data and its purpose, and also about the rights that you have, provided that personal data has been collected or processed.

In the context of our data protection declaration we use various legal and technical terms. Explanations can be found here.

As the persons responsible for data processing, we have implemented numerous technical and organizational measures to ensure that the personal data processed by us is protected as completely as possible. Internet-based data transfer can however create security gaps, which means that absolute protection cannot be guaranteed. For this reason, you also have the option to communicate personal data to us through alternative methods, i.e. by telephone.

This data protection declaration applies to the personal data of our customers and suppliers as well as visitors to our websites.

Expert Systems AG Quedlinburger Str. 1 10589 Berlin Germany

E-Mail: privacy@provenexpert.com Websites: All Expert Systems AG websites and services

We have designated a central contact person for all data protection-related questions to safeguard the interests of all those affected by data processing. You can reach us at:

Expert Systems AG Remo Fyda Quedlinburger Str. 1 10589 Berlin Germany

E-Mail: privacy@provenexpert.com Websites: All Expert Systems AG websites and services

You can contact our contact person directly at any time with any questions and suggestions about data protection.

Important: Please note that this privacy policy may change from time to time. Please use this page to inform yourself, as we will publish any changes here. If you disagree with any aspect of our privacy policy, you may have certain statutory rights. These are described in the relevant section below.

What personal data you have to transmit to us depends on which of the offers on our website www.provenexpert.com you decide to use going forward.

Are you a visitor, entrepreneur or (potential) customer of a company?

Entrepreneur

If you use our offers on www.provenexpert.com as an entrepreneur, we require certain personal information from you, depending on whether you are interested in a free or a paid variant of our review offer.

In concrete terms, this means:
A more detailed description of the personal data we collect in this way can be found here.

Insofar as you make use of paid services, we also collect and store your account information and/or credit card data.

Customer

If you use our offers on www.provenexpert.com as a customer, the data we require from you depends on whether you are searching for companies or would like to publicly review a company you have already used.

Variant 1: Your customer search request

In order to successfully assist you in your search for a service provider, we require the following information from you:

• - Searched industry
• - Service location / postal code
• - Description of the service you are looking for
• - Desired date of service
• - Name, email address and/or your phone number

Variant 2: Your customer review

• - Name of the reviewed company
• - Information about the use of the service
• - Your review
• - Email address
• - Your logfile

Visitor

We use cookies on our website.
For more information about what data we collect via cookies when you visit our websites, click here.

2. From whom is personal data collected?

General personal data of our users:

We generally only collect your personal data directly from you. Exception: If you are a member of an association or other organization with which we have a framework agreement, we may collect your data related to that organisation.

Customer data:

We generally only collect your personal data directly from you. Exception: If you are a member of an association or other organization with which we have a framework agreement, we may collect your data related to that organisation. We generally only collect your account information and/or credit card details directly from you.

Visitors to our websites:

When you visit the website, we automatically collect data using cookies in accordance with the cookie settings in your browser. We also collect information from you when you contact us through the websites, for example when you enter information on a contact form, chat, or comment on a post on our blog.

3. Why we collect personal data and what we use it for

General personal data of our users & Customer data
We collect and use information about our customers (i.e. users) primarily to make sure that the contractual agreement between you and Expert Systems is properly implemented in order to ensure a smooth business relationship. For example, we need personal data to process orders and to provide the services you have ordered (service packages). A user account, which stores personal data, is required to use our products.

We also partly require personal data from you in order to provide you with our services (such as customer support) in the best possible way.

More information about how we use your personal data can be found here.

General personal data of the evaluators of our users and customers
When you submit a review, we collect your personal data to prevent misuse (e.g. through multiple reviews).

Visitors to our websites:
We use your data to to facilitate navigation on our website, for example to display offers and/or information, which we think will be of interest to you.

More information about cookies, such as how we use them and which options are available to you can be found in in the section entitled "Our Privacy Policy in detail" here.

4. Disclosure of personal data

General personal data of our users & Customer data
We pass on your data for the following purposes: (1) Primarily to ensure that you can use our product (e.g. transfer to the Google Cloud Platform as hosting service provider), (2) to payment service providers such as PayPal.

An overview of the categories of recipient to whom your personal data can be given can be disclosed in the section entitled "Our Privacy Policy in detail" here.

General personal data of the evaluators of our users and customers
We pass on your data exclusively for the purpose of enabling you to submit a rating (transfer to the Google Cloud Platform as a hosting service provider).

Visitors to our websites:
Unless you specify otherwise, we can give your information to web analytics service providers, affiliate networks, marketing automation platforms and social media services, in order to ensure that you only receive appropriately targeted advertisements.

In general, we reserve the right to also transmit your data to other countries outside of the EU or EEA. In this case, we will however ensure a minimum level of data protection corresponding to the GDPR level of protection, through the appropriate arrangements.

5. Duration for which we store personal data

The criteria for the duration of storage for personal data is the respective legal retention period, after which the data will be deleted. In addition to this, we save the respective data only provided that they are still necessary for the fulfillment of a contract.

More information about our basic procedures relating to storage of personal data can be found in the section entitled "Our Privacy Policy in detail" here.

6. Rights of the person affected – which rights do you have in relation to your personal data stored by us?

Even if we already hold your personal data, you are entitled to various rights with regard to this information. If you would like to talk to us regarding this, please do not hesitate to contact us. We will make every effort to take care of your query as soon as possible and every case will be treated in accordance with applicable legal regulations. Please note that we may record our communication in order to better solve the issues raised by you.

Insofar as we save your personal data, certain legal rights apply (the "rights of the person affected"), which we will outline here. More information about individual rights can be found here.

7. Use of cookies

Our websites/web services use "cookies". Cookies are small text files that are saved on the hard drive of your PC (client) for a defined period.

Most cookies we use are deleted at the end of the browsing session (known as session cookies).

Other cookies stay on your computer and allow us to recognize your computer on your next visit ( (permanent or persistent cookies).

Cookies usually contain a "cookie ID". This is a pseudonymized date in the form of a unique cookie identification.

It consists of a series of characters that can be used to associate websites and the servers with a specific Internet browser (client) in which the cookie is saved.

Cookies are generally distinguished into first and third party cookies.

First party cookies will only be assigned by the website that you are currently on (for example, the website under the domain provenexpert.com).

Expert Systems AG uses first party cookies for essential website functions, like for storing website settings, restoring sessions and for securing your session data.

Within this process, access only occurs in impersonalized form and exclusively when you visit our website. Other websites cannot access this information.

To ensure the data security of our visitors, it is necessary to allow first party cookies in order to use provenexpert.com .

Third party cookies are set by a third party provider that has been authorized by Expert Systems AG, i.e. not by the actual website that you are currently viewing.

By using these cookies, we can adjust our offers to best meet customer preferences and can make browsing our site as convenient as possible for you (advertising, conversion tracking and personalization).

In addition, we use third party providers in order to collect online statistics (analytics) as a basis for measuring the success of our advertising offers and subsequently improving them.

Even when cookies from third party providers are used, data is only accessed in an anonymized form.

An overview of third parties on our websites can be found here in the section entitled "Use and application of third party tools and services on our websites".

To manage cookies the service Cookiebot is used. You can use it to accept or reject the individual groups of cookies. To open its interface again you can use the link at the top of this page. You can learn more about Cookiebot further down this document.

All essential services from our website/web services essentially work without the use of third party cookies.

You may prevent the installation of cookies anytime by selecting the option "Do not accept cookies" in your browser. In addition, you can at any time delete cookies via your Internet browser or another software program. This can be done with any standard Internet browser.

A. Detailed information about the processing of user and customer data

1. What personal data do we collect?

General personal data of our users & Customer data:
We collect some data about our customers and users that we require to deliver our products and implement contracts and for license management. We therefore require your name, your email address and country of residence in order to create a user account, which is then used to order service packages. The same information is collected when you register for our newsletter. We may also require further information from you (e.g. address, telephone number or date of birth) to order of services. You may also provide us with further data - this is optional. The specific data collected depends on the form or input mask used, or as requested by our support staff over the phone.

If for any reason we require additional personal data from you, we will let you know.

We analyze the use of our products with Google Analytics. Here, specific computer data (including your computer's hardware key, processor name etc.) is used to create a pseudonymized profile, which collects usage data in order to improve our products. For more information on this topic can be found here.

General personal data of evaluators of our users and customers:
When you create reviews, we generally store only your email address and the associated log file as inventory data. You also have the option to enter your first and last name, which we will also save.

Visitors to our websites:
When normal Internet users visit our website, we save data to what are known as log files. Log files consist of the IP address assigned by the Internet service provider to the computer making the request for that session, as well as the name and version of the Internet browser being used to visit the website.

We also use our own session cookies when you visit our website. The information we obtain from these include the type and version of your Internet browser, the website from which you came to our website, which pages you visited on our website, as well as the date and duration of your visit.

2. From whom is personal data collected?

We generally only collect your personal data directly from you.

Exception:
If you are a member of an association or other organization with which we have a framework agreement, we may collect your data related to that organisation.

3. Why we collect personal data and what we use it for

User data:

In general, we use information about our users or customers in the following ways:

a) Advertising measures
We may send you information at regular intervals that we believe to be of interest to you, and also inform you of certain discounts and special offers to which you are entitled as a result of your business relationship with us.

We require your consent for some aspects of these activities that are not covered by our legitimate interests (in particular for data collection using cookies and direct marketing to you through our digital channels). According to the circumstance, we will ask for your explicit consent via "opt-in" or silent consent via "soft opt-in" (see below).

Consent via "Soft opt-in" is a specific form of consent that applies if you have had business dealings with us before (e.g. you have ordered a product from us or registered a domain with us) and we may advertise other products or services within this context. For consent via "soft opt-in", we will consider your consent as provided, as long as you do not withdraw it.

You can revoke your consent at any time. For more information on this topic can be found here.

Our advertising as a whole is based on entities that we consider to be especially helpful to our customers and users. However, we are aware that we do not always do things the right way for everybody. We may use your data to display you advertisements and other Expert Systems AG content on other websites, e.g. Facebook. If you do not wish your data to be used in this way, please change the cookie settings in your browser, as described above. Even if you deactivate advertisement cookies, it's possible that you may continue to receive Expert Systems AG advertisements. If this happens, it is because the advertisement is targeted towards an anonymous target group and not towards you specifically.

b) Functionality of our products and protection of our intellectual property rights
We are dependent on protecting our intellectual property rights, not least for the purposes of being able to offer you our products and services at their usual standard of quality and at attractive prices.

In order to enable you to use our products, a user account is necessary, where certain data must be obligatorily saved (name, email address and country).

c) Assertion, exercise or defence of legal claims
In unusual cases, we may also use your personal data in order to assert, exercise or defend legal rights.

We may use your personal data for these purposes if it corresponds with our legitimate interests. For more information on this topic and what that means can be found here.

4. Disclosure of personal data

We may share your personal data with the following categories of people in a variety of ways and for a variety of purposes, as appropriate and in accordance with local laws and regulations:

• All company groups
• Tax authorities, audit authorities or other authorities, if we in good faith believe that we are required by law or other regulation to disclose such information
• External service providers that provide services in our name (including external email providers, auditors and accountants, technical support)
• Providers of external IT services and storage providers, if a corresponding arrangement exists
• Marketing technology platforms and suppliers

If in future we merge with or are acquired by another company (or should meaningful discussion about such a possibility take place), we may disclose your personal data to the (future) new company owners.

In general, we reserve the right to also transmit your data to other countries outside of the EU or EEA. In this case, we will however ensure a minimum level of data protection corresponding to the GDPR level of protection, through the appropriate arrangements.

5. Duration for which we store personal data

We process and store personal data only for the period necessary to achieve the purpose of storage or as provided for by the European Directive and Regulation Provider or another legislator in laws or regulations to which we are subject.

If the storage purpose no longer applies or if a storage period prescribed by the European Directive and Regulation Provider or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the legal regulations.

6. How we protect your personal data

We will adopt all reasonable and appropriate measures to protect the personal information we have stored from misuse, loss or unauthorized access. To this end, we have taken a range of technical and organizational measures. This includes measures to deal with any suspected breaches of data.

If you believe that your personal data has been misused or has been lost or has been accessed without authority, please inform us immediately. Our contact details can be found in Part 1 of this Privacy Policy.

As mentioned above, we collect a limited amount of data from visitors to our websites in order to facilitate navigation of our websites and to better manage the services that we offer to you. You can use our websites without having to provide any personal data. In certain cases (e.g. product activation etc.), processing of personal data may be required.

1. General data and information collection

Our websites collect a variety of general data and information each time one of their pages is loaded. This general data and information is saved to our server log files. Data that may be collected includes (1) browser types used and their versions, (2) operating system used by the accessing system, (3) the website from which an accessing system reaches our websites (what is known as a "referrer"), (4) subpages on our websites that are accessed by an accessing system, (5) date and time of visit to websites, (6) an Internet Protocol Address (IP address) and (7) any other similar data and information, that could serve as hazard prevention in the event of an attack on our information technological systems.

No conclusions are drawn about the person concerned during the use of this general data and information. This information is required in order to (1) correctly transmit the content of our website, (2) optimize content of and advertising for our website, (3) guarantee the permanent functional operability of our information technology systems and technology for our website, and (4) in the event of a cyber attack, provide law enforcers with necessary information for prosecution. This anonymously collected data and information is therefore evaluated by Expert Systems AG statistically and also with the aim of increasing data protection and data security in our company ultimately to ensure an optimum level of protection for the personal data processed by us. Anonymous server log file data are stored separately from all personal data provided by a person concerned.

2. Registration on our website

You can register your personal data on several of our websites, for instance by signing up to our newsletter or setting up a user account (e.g. by activating an Expert Systems AG product). The specific personal data you submit to Expert Systems AG is dependent on the type of input mask used for registration. The personal data submitted by the person concerned will be collected and stored for the sole purpose of internal use and purposes by Expert Systems AG. We may arrange for disclosure to one or more contract processors, for example a telecommunications provider, who also uses the personal data exclusively for an internal use that is attributable to us.

When registering on an Expert Systems AG website, the IP address provided by your Internet service provider (ISP), date and time of registration will also be stored. This data is stored against the background that the misuse of our services can only be prevented in this manner and that this data may enable committed criminal offences to be investigated. In some respects, the storage of this data is necessary for Expert Systems AG security reasons. This data will not be passed on to third parties unless required to do so by law or for the purpose of criminal prosecution.

Registration by voluntarily submitting data also enables us to offer you content or services that may only be offered to registered users due to to the nature of the offer. Registered users are free to modify personal data submitted during registration or have them deleted in entirety from our database at any time, provided that it is no longer needed to fulfil the contract (e.g. if the contract term has not yet expired) or is subject to legal retention periods.

Upon request, we will provide you at any time with information about which personal data we have stored about you. Our data protection officer is available as a contact person in this regard.

3. Forms to provide information and services

On our website you have the possibility of providing personal information to us by filling out and submitting various forms. These information, e.g. your email address, name or phone number, are used by us to

• provide your the requested types of information (e.g. sendout of an email newsletter, provision of content in PDF format, attendance at events and webinars)
• to contact you about similar relevant offers and information from ProvenExpert.

On each form, we will inform you explicitly before you submit the form, which particular types of information this entails.

But submitting these forms on our website you agree to be contacted by us via email or by phone (where applicable) to provide you the aforementioned services. If you would like to revoke this consent you may do so anytime by using one of the unsubscribe links included in the footer of each of such emails and by updating your subscription preferences on the webpage that opens after clicking this link. You may also give us notice in writing to support@provenexpert.com so we can do these adjustments of your preferences on your behalf.

4. Newsletter tracking

The Expert Systems AG newsletters contain what are known as tracking pixels. A tracking pixel is a miniature graphic embedded in emails in HTML format for the purposes of recording and analyzing log files. This enables us to conduct a statistic evaluation of the success or failure of our online marketing campaigns. On the basis of the technology used, we can recognize whether and when an email was opened by you and whether you clicked on the links within the email.

Data collected in this manner is stored and evaluated on our account by CleverReach GmbH & Co. KG, Mühlenstraße 43, 26180 Rastede, in order to optimize newsletter distribution and modify the content of future newsletters further so that they match the interests of the person receiving the newsletter. Your data will not be disclosed to any third parties. You can revoke your declaration of consent, which was submitted separately, at any time. To do this, please contact our data protection officer.

5. Blog comment feature

To use the comment feature on our blog, we use the Disqus web service comment system. All personal and non-personal data generated (comments, links, usernames, passwords) or entered (email address, login details from third party providers) via the Disqus comment system will be sent to the web service's servers where they will be processed and stored. In this regard, the respective Disqus terms of use and policies apply and can be read here.

6. YouTube Videos

We have integrated components from YouTube on our website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on these free of charge.

7. Use and application of third party tools and services on our websites

Expert Systems AG uses various services and tools from third party providers on its websites. A detailed list of these services and tools and their purpose can be found in our cookie declaration, which you can access via the 'Open cookie settings' link at the top of this page.

a) Google

We use various services of Google, Inc. on our websites. The operator of Google Remarketing services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The following services are integrated on our websites:

• Google Analytics (with anonymization function)
  Expert Systems AG has integrated Google Analytics on these websites. Google Analytics is a web analysis service. Expert Systems uses an anonymization function for web analysis via Google Analytics, by which Google shortens and anonymizes the IP address of the internet connection of the data subject.
• Google AdWords
  Google AdWords is an internet advertising service that allows advertisers to place ads in Google search engine results as well as in the Google advertising network. Google AdWords allows an advertiser to specify certain keywords in advance, by means of which an ad is displayed in Google search results exclusively when the user retrieves a keyword-relevant search result from the search engine.
• Google Optimize
  Google Optimize is a service for conducting so-called A/B tests, especially in marketing.
• Google Connect
  You have the option to register or log in with us using your Google Plus account credentials (so-called Google Plus Connect). If you use this option for user login via the Google Plus Connect button, Google Plus will transmit your email address, user ID and name to us. We use this data solely for the purpose of registration and login.

b) Facebook

• Facebook Plugins (Like & Share Button)
  Plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our pages.
• Facebook Pixel / Remarketing / Custom Audiences
  Within our online offering, so-called "Facebook Pixels" of the social network Facebook are used. The Facebook Pixel enables Facebook to identify visitors to our offering as target groups for the display of advertisements, so-called "Facebook Ads".
• Facebook Connect
  You also have the option to register or log in with us using your Facebook account credentials (so-called Facebook Connect function).

c) Microsoft Ads

Expert Systems AG has integrated Microsoft Ads on this website. Microsoft Ads is an internet advertising service that allows advertisers to place ads in Microsoft search engine results as well as in the Microsoft advertising network.

d) LinkedIn

LinkedIn is a social network for building and maintaining professional business contacts. Expert Systems AG operates its own LinkedIn profile to advertise for open positions as well as to specifically promote Expert Systems products.

e) Xing

You have the option to register or log in with us using your Xing account credentials (so-called Login with Xing).

f) Messagebird

Messagebird is an SMS service provider through which our customers can invite end users to their surveys via SMS.

g) Fastbill Monsum

FastBill Monsum provides us with an accounting system through which invoices are managed and created, and in which technical and personal master data for user accounts are stored.

h) Stripe, Inc.

Stripe, Inc. is our banking service provider that ensures all payment modalities for contractual fulfillment, such as the collection of invoice amounts via SEPA direct debit mandate or credit card.

i) PayPal S.à.r.l.

PayPal S.à.r.l. is another banking service provider that processes the payment of invoices via PayPal.

j) CentralStation

CentralStation is a software for customer data management. Personal data such as communication data is stored here to enable quick and easy contact with customers.

k) Telekom

Telekom is one of our hosting service providers and provides us with the servers we need to make our services available to you.

l) CleverReach

We use CleverReach services to send mailings and newsletters with interesting information and offers to our users and customers.

m) Join.Me

Join.Me is used to allow interested parties and customers to participate in screen presentations and online meetings.

n) Microsoft

We use email and Office Software Cloud for internal work, but also to process service requests and orders.

o) Hotjar

This website uses Hotjar. Hotjar is a tool for analyzing your user behavior on our website. With Hotjar, we can record your mouse and scroll movements and clicks, among other things. Your IP address is anonymized immediately.

p) Lead Forensics

For marketing and optimization purposes, products and services from Lead Forensics are used on this website. Lead Forensics determines details of your organization, including phone number and web address, based on the imprint.

q) Oribi

This website uses Oribi, a web analytics service from Oribi Ltd., USA. Oribi uses so-called cookies that enable an analysis of your use of the website.

r) Google Cloud Platform

The Google Cloud Platform is one of our hosting service providers and provides us with the servers we need to make our services available to you.

s) Twilio Sendgrid

Twilio SendGrid is a communications service provider for transactional and marketing emails and sends emails to customers on our behalf.

t) Cookiebot

To ensure the best possible protection of your personal data and the best possible experience on our website, we have integrated an external tool (cookiebot.com) for managing cookies.

u) Yext

Yext enables our customers to synchronize changes to their company data across multiple rating portals.

Tracking and Advertising Service Providers

a) Criteo

This website uses Criteo, a service from Criteo SA, Paris. Criteo is a web analytics service that collects technical data about your browsing behavior to display personalized advertising to you.

b) Twitter

This website uses the Twitter Universal Tag from Twitter Inc. for tracking events and page views.

c) LinkedIn Insight Tag and Matched Audiences

This website uses the LinkedIn Insight Tag from LinkedIn Ireland. The LinkedIn Insight Tag is a re-targeting and analytics tool that causes a cookie to be placed in your web browser when you visit the ProvenExpert website.

d) The Reach Group

Expert Systems AG uses the services of The Reach Group GmbH, an agency for digital advertising formats.

e) Quantcast

This website uses Quantcast services for user measurement and advertising purposes.

f) ADITION Conversionpixel & Adition Retargetingpixel

ADITION technologies AG is a technology provider for the delivery and optimized deployment of advertising materials.

g) Plista

Plista presents individual content and advertising recommendations to visitors of websites in the plista network.

h) Taboola

We use Taboola on our website. This enables us to recommend content that matches your personal interests.

i) AppNexus

AppNexus Inc. is an advertising technology company based in New York (US) that offers online auction infrastructure and technology for data management.

j) HubSpot

This website uses HubSpot, a service from HubSpot Inc., with which we cover various aspects of our online marketing, such as content management, email marketing and contact management.

Additional Service Providers

a) Cisionpoint

We use the online tool Cisionpoint as a PR management solution to manage our press distribution lists.

b) Trello

Trello is a web-based project management software that we use for planning projects.

c) Slack

Slack is a web-based instant messaging service that we use for direct communication within the team.

d) Social Hub

The online platform SocialHub gives us the opportunity to respond more quickly to social media conversations.

8. Privacy policy for the payment methods offered

a) PayPal

Expert Systems AG has integrated components from PayPal on its websites. PayPal is an online payment service provider.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If you select 'PayPal' as a payment option in our online shop during the order process, your data is automatically transmitted to PayPal.

The current privacy policy of PayPal can be found here.

b) Other payment options

You enter your payment data (e.g. if you opt for a SEPA direct debit mandate or payment by credit card) on a separate website in your user account.

Insofar as we store your personal data or process it in any other way, you are entitled to special legal rights (the so-called 'data subject rights'), which we would like to explain briefly below.

1. Right to access information

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right to information about this personal data and to the following information:

• the purposes of processing;
• the categories of personal data being processed;
• the recipients or categories of recipients to whom the personal data has been or will be disclosed;
• the planned duration for which the personal data will be stored;
• the existence of a right to rectification or deletion;
• the existence of a right of appeal to a supervisory authority;
• all available information about the origin of the data;
• the existence of automated decision-making including profiling.

If personal data is transferred to a third country or to an international organisation, you have the right to be informed about the appropriate safeguards.

If you wish to exercise this right to information, you can contact our data protection officer at any time.

2. Right to correction

You have the right to request that we immediately correct any incorrect personal data concerning you. Taking into account the purposes of processing, you have the right to request the completion of incomplete personal data.

If you wish to exercise this right to rectification, you can contact our data protection officer at any time.

3. Right to deletion (Right to be forgotten)

You have the right to request that we delete personal data concerning you without delay, provided that one of the following reasons applies:

• The personal data is no longer necessary for the purposes for which it was collected.
• You revoke your consent and there is no other legal basis for the processing.
• You object to the processing and there are no overriding legitimate grounds.
• The personal data has been processed unlawfully.
• The deletion is necessary to fulfil a legal obligation.
• The personal data was collected in relation to information society services offered.

If you wish to exercise this right to deletion, you can contact our data protection officer at any time.

If we have made the personal data public and are obliged to delete it, we will take reasonable measures to inform other data controllers.

4. Right to restrict processing

You have the right to request that we restrict processing if one of the following conditions is met:

• the accuracy of the personal data is contested by you;
• the processing is unlawful and you refuse the deletion;
• we no longer need the personal data, but you need it for legal claims;
• you have objected to the processing pending verification.

If you wish to exercise this right to restrict processing, you can contact our data protection officer at any time.

5. Right to data portability

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

You have the right to have the personal data transmitted directly from us to another controller, insofar as this is technically feasible.

To assert the right to data portability, you can contact our data protection officer at any time.

6. Right to objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.

We will no longer process the personal data unless we can demonstrate compelling legitimate grounds.

If personal data is processed for direct marketing purposes, you have the right to object at any time.

To exercise the right to object, you can contact our data protection officer at any time.

7. Right to revoke data protection consent

You have the right to revoke your data protection consent at any time.

If you wish to exercise your right to revoke consent, you can contact our data protection officer at any time.

8. Right of appeal to a regulatory body

You have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR.

Contact details of the competent local supervisory authority: Berlin Commissioner for Data Protection and Freedom of Information Friedrichstr. 219, 10969 Berlin Email: mailbox@datenschutz-berlin.de

1. Legitimate interest

According to Article 6 (1) f) of the GDPR, we are permitted to process your data even without express consent, provided that if this is necessary to safeguard our legitimate interests or those of a third party, as long as your interests or your fundamental rights and freedoms requiring the protection of personal data, do not outweigh this.

We do not believe that the following activities adversely affect persons in any way. On the contrary, they help us provide more tailored and efficient services to you and are therefore beneficial to all parties. However, you still have the right to object to our processing of your personal data on this basis, as mentioned above.

• User and customer data: We must ensure that our business activities run smoothly, so that we can continue to provide you with our products and services of the usual quality and at a reasonable price. For this reason, we require your data in order to fulfill our contracts with you, to bill you for our services and supply you with our products, to answer your support queries and so that we can provide you with updates and patches for your software. Lastly, we also require your data in order to protect our intellectual property in the form of our software and content from misuse and piracy by using the data stored in your user account. It is therefore in our legitimate interests to use your data. We have our own legal obligations and it is in our legitimate interest to insist on their fulfillment. If we believe in good faith that this is necessary, we may therefore disclose your information for the purposes of law enforcement or tax collection or actual or threatened disputes.
• Evaluator data: When you submit a review, we collect your personal data to prevent misuse (e.g. through multiple reviews).
• Website visitors: We collect a limited amount of information from visitors to our websites and use it to help you navigate our websites and better manage the services we offer. The data we collect in this way comprises information about how you use our website and how often you access it.

2. Agreement

Under certain circumstances, we may need your consent to process your personal data in connection with certain activities. Depending on what exactly your data is needed for, we will either ask for your explicit consent via "opt-in" or silent consent via "soft opt-in".

According to Article 4(11) of the GDPR, consent (via opt-in) is classed as "any voluntary declaration of intent, in an informed and unequivocal manner, in the form of a declaration or other clear affirmative act, with which the person concerned indicates their consent to the processing of personal data concerning themselves". Put simply, this means that:

• you must voluntarily give us your consent without us putting any kind of pressure on you;
• you must know what you are granting consent for - we will therefore ensure that we have provided you with sufficient information; and
• you must give us your consent in the form of a positive, affirmative act. In most cases, we will provide you with a field that you must mark so that this requirement is clearly and unambiguously fulfilled.

We keep records of the consents you have given in this way.

As mentioned above, in some cases a consent via soft opt-in is sufficient. We may advertise products and services to you that are related to the products we offer (above all our software and the content we offer) and services (for example in the hosting sector), provided that you have not actively unsubscribed from these communications.

As mentioned above, you have the right to withdraw your consent for these activities. To do this, please contact our data protection officer.

3. Assertion, exercise or defence of legal rights

Sometimes it may be necessary for us to process personal data in connection with the exercise or defense of legal claims. This can occur, for example, if we need legal advice in relation to legal proceedings or are legally required to preserve or disclose certain information as part of legal proceedings.

The privacy policy of Expert Systems AG is based on the terminology used by the European Directive and Regulation Provider when the General Data Protection Regulation (GDPR) was enacted. Our privacy policy should be easy to read and understand for both the public and our customers and business partners. To ensure this, we would like to explain the terminology used in advance.

• “personal data”: Personal data is any information relating to an identified or identifiable natural person.
• “data subject”: A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
• “processing”: Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means.
• “controller”: Controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.