Privacy Policy

Privacy Policy

For the German or Polish version, please click below: 

Datenschutzerklärung      Polityka prywatności

baramundi Privacy Policy

General

We respect and protect your privacy. The protection of personal data is very important to us. This page is therefore designed to provide you with transparent information about our privacy policy.

In principle, we treat all personal information confidentially and affirm that we adhere strictly to the statutory data protection regulations of the Federal Data Protection Act (Bundesdatenschutzgesetz) and the EU GDPR (European General Data Protection Regulation), which came into force in May 2018.

We have taken technical and organizational measures to ensure that both we and also external service providers comply with data-protection legislation regulations. 

Information about the collection of personal data

(1) The following section provides information about the collection of personal data during use of our website. Personal data means any information relating to an identified or identifiable natural person (‘data subject’), e.g. name, address, e-mail addresses, user behavior.

(2) Controller according to Art. 4 para. 7 EU General Data Protection Regulation (EU-GDPR) is baramundi software AG, Beim Glaspalast 1, 86153 Augsburg, Germany, Phone: +49 821 5 67 08 - 19, e-mail address: info(at)baramundi.com (see our Legal Information). 

You can contact our data protection officer at privacy(at)baramundi.com or by sending a letter to our postal address for the attention of the “Data Protection Officer”.

(3) When you contact us by e-mail or via a contact form, the information you provide (your e-mail address, where applicable your name and telephone number) will be stored by us for the purpose of answering your questions. We delete the data that arises in this context once storage is no longer required, or limit processing in the event of statutory retention requirements.

(4) If we rely on contracted service providers for individual functions of our service or wish to use your data for advertising purposes, we will inform you in detail below about the respective procedures. In doing so, we will also designate the specified criteria for the storage duration.

Your rights

(1) You have the following rights vis-à-vis ourselves in respect of the personal data about you:

  • right to information,
  • right to rectification or erasure,
  • right to restriction of processing,
  • right to object to processing,
  • right to data portability.

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

(3) You have the right to revoke a data protection declaration of consent at any time. Processing conducted with consent prior to revocation of consent remains valid and unaffected by revocation.

Collection of personal data when visiting our website

(1) If you use the website for informative purposes only, i.e. if you do not register or otherwise provide us with information, we will only collect the personal data that your browser transmits to our server. If you wish to view our website, we will collect the following data, which is technically necessary for us to display our website to you and to guarantee stability and security (legal basis is Art. 6 (1) sentence 1f GDPR):

  • IP address
  • date and time of the request
  • time zone difference to Greenwich Mean Time (GMT)
  • content of the requirement (specific page)
  • access status/HTTP status code
  • respective amount of data transmitted in each case
  • website from which the request comes
  • browser
  • operating system and its interface
  • language and version of the browser software.

(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and by which the body that sets the cookie (in this case through us) receives certain information. Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.

(3) Use of Cookies:

a) This website uses the following types of cookies, whose scope and functioning are explained below:

  • Transiente cookies (see b)
  • Persistente cookies (see c)
  • Required cookies (see d)
  • Functional cookies (see e)
  • Marketing cookies (see f)

b) Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

d) Required Cookies:These cookies are necessary in order to enable the basic functions of this website (examples: Provision of a stable site, protection against misuse of online services).
Cookies: So-called session cookies fe_typo_user (contain randomly generated session identification numbers, which are deleted by closing the browser).

e) Functional cookies: These cookies allow us to analyze your website usage in order to evaluate and improve our services. They can also be used to improve the customer experience on this website, for example by remembering your language/country selection. Your consent to this use is voluntary and may be revoked at any time.
Cookies: be_typo_user, be_lastLoginProvider, PHPSESSID (only relevant for administrators of the website), fe_typo_user (standard session cookie from TYPO3).

f) Marketing cookies: These cookies are used to present you with advertisements that are better suited to you. Advertising cookies may be used, for example, to share information with advertisers so that the ads displayed are more relevant to your interests. Your consent to this use is voluntary and may be revoked at any time. 
Cookies: ga and _gat for Google Analytics (see "Use of Google Analytics"), _gid for Google Tag Manager (see "Google Tag Manager"), Google Maps (see "Integration of Google Maps")

g)You can configure your browser setting according to your wishes and, for example, reject the acceptance of third-party cookies or all cookies. Please be aware that you may not be able to use all features of this site.

Technically Necessary Cookies

We use technically necessary cookies (e. g. to store the user's consent status for cookies or to maintain the user's status for all page requests) to improve the user experience, performance and security of our website. We store the collected data for up to one year. These cookies do not store any personal data. The legal basis for the use of these technically necessary cookies is Art. 6 (1) sentence 1f GDPR.

View and Adjust Cookie Settings

You can recall your cookie settings at any time to manage your preferences: Recall Cookie Settings

Additional features and services offered by our website

(1) In addition to purely informational use of our website, we offer various services that you can use if you are interested. For this, you will generally need to provide additional personal information that we will use to provide the respective service and to which the aforementioned data-processing principles will apply.

(2) In some cases, we use external service providers to process your data. These providers have been carefully selected and commissioned by us, are bound by our instructions and are regularly inspected.

(3) Furthermore, we may disclose your personal data to third parties, if we offer participation in sales campaigns, the conclusion of contracts or similar services in conjunction with partners. You will be provided with further relevant information when entering your personal data or below in the description of the service.

(4) Insofar as our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the service.

Use of your data for advertising purposes

We use the personal data of our existing customers for direct marketing for our own products and services. The legal basis for our legitimate interest in direct marketing is Art. 6 (1) sentence 1f GDPR.

You can object to the processing of your personal data for marketing purposes at any time. You can send your objection to request(at)baramundi.com free of charge at any time.

Participation in training courses

When you register for our training courses, we collect, store and use personal data needed for your participation.

(1) When you register for training
We require the following information when you register to coordinate your participation in advance and to ensure that we can deliver the training in its entirety:
- First and last name
- Company
- Phone number
- E-mail address
You also have the option to provide additional details (department, position, company address) which we will use to personalize contact with you. 
The legal basis for the data processing required for training registration and implementation is Art. 6 Para. 1 S. 1 lit. b DS-GVO. There is no legal or contractual obligation to provide your data. However, you would not be able to participate in our training courses if you decline to provide the required information. 
The data is deleted as soon as it is no longer required for the purpose for which it was collected and there is no legal obligation to retain it. Legal obligations to retain data exist, for example, from the German Fiscal Code (6 years) or the German Commercial Code (10 years).

(2) Post-training feedback questionnaire
We also use your data to send you a link to a feedback questionnaire on the training you attended. Filling out the questionnaire is voluntary and can be completed without providing personal data.
The anonymous questionnaires are stored by us for the purpose of long-term evaluation and improvement of our training events.
The legal basis for our justified interest in improving our training offer is Art. 6 Para. 1 lit. f DSGVO. 
The service provider for the feedback questionnaire is Microsoft Forms from Microsoft Corporation. The data centre is located in Europe.

(3) Use of your data for advertising purposes
We use the personal data of our participants for direct marketing of our own products, events and training offers. For this purpose, we also pass on your data to our sales partners. We and our sales partners use your telephone number and other contact information to contact you about our products, events and services. The legal basis for our justified interest in direct advertising by us and our sales partners is Art. 6 para. 1 sec. f GDPR.
You can object to the processing of your personal data for advertising purposes at any time and free of charge by stating your objection in an email addressed to request(at)baramundi.com

(4) Online Training
In case of online training we use service providers for videoconferencing.

Use of the baramundi forum

(1) Our forum can only be read if you are registered. If you would like to actively participate in the forum, you must register by entering your e-mail address, a password of your own choice and your freely selectable user name. There is no requirement to use a real name for the user name; pseudonymized use is possible. You must also provide information about your first name, last name, company name, country, zip code, city, street and house number. We require this last-mentioned information in order to be able to accurately identify an existing contractual relationship between you and baramundi software AG. We use the so-called double-opt-in process for registration, which means that your registration is only complete if you have previously confirmed your registration via a confirmation e-mail sent to you for this purpose by clicking on the link contained therein. If you do not confirm your registration in this way, it will be automatically deleted from our database.

(2) If you sign up for a forum account, we will – until cancellation of your registration and in addition to the information provided at the time of registration – store all the information which you post in the forum, such as public posts, bulletin board entries, friendships, private messages, etc., for the purpose of operating the forum. The legal basis for this storage is Art. 6 para. 1 sentence 1 lit. f GDPR. Storage takes place for security reasons if the rights of third parties are violated or illegal content is left behind (insults, slander, incitement to hatred, etc.). In this case we can be prosecuted ourselves for the contribution and are therefore interested in the identity of the author. These data will not be passed on to third parties unless such a passing on is legally prescribed or serves our legal defence.

(3) If you delete your account, your public statements, including in particular contributions to the forum, will remain visible to all readers, but your account will no longer be available and will be identified in the forum with "[guest]". All other data will be deleted.

Use of the baramundi Knowledge Base

(1) Our Knowledge Base can only be read if you are logged in. If you would like to actively participate in the Knowledge Base, you must register and log in to the baramundi Forum.  
When you visit the Knowledge Base, a Knowledge Base account is created with your user name, first name and surname selected in the forum.

(2) Until you cancel your Knowledge Base account, in addition to your registration data, we store all information that you provide in the Knowledge Base, i.e. comments and likes of the Knowledge Base articles as well as search queries, and use these for anonymous statistical evaluations to optimize and expand the information offered by the Knowledge Base articles. This serves our interest as Knowledge Base operators to provide you with comprehensive information about our products. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f DS-GVO. In addition, for security reasons, storage is carried out if the rights of third parties are violated or illegal content is left behind in articles (insults, slander, seditionary content, etc.). In this case we can be prosecuted ourselves for the contribution and are therefore interested in the identity of the author. This data will not be passed on to third parties, unless such a transfer is required by law or serves our legal defence.

(3) If you delete your Knowledge Base account, your public statements, especially the article comments, will remain visible to all readers, but your account will no longer be accessible and will be marked as "[Guest]". All other data will be deleted. 

Newsletter

(1) With your consent, you can subscribe to our newsletter, which informs you about our current interesting offers. The advertised goods and services are named in the declaration of consent. Our existing customers receive our newsletter automatically, i.e. without the registration described below, as long as they have not objected to the use of your data for advertising purposes (for details see above "Use of your data for advertising purposes").

(2) To register for our newsletter, we use the so-called double opt-in procedure. This means that after you have registered, we will send you an e-mail to the e-mail address specified in which we will ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be automatically deleted after one month. In addition, we will store each of your IP addresses used and the times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible misuse of your personal data. The only mandatory information required for sending the newsletter is your e-mail address. The provision of additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter.

(3) The legal basis is Art. 6 (1) sentence 1 lit. a GDPR or, in the case of our existing customers, Art. 6 para. 1 sentence 1 lit. f GDPR (direct advertising with existing customers).

(4) You can unsubscribe from the newsletter at any time. You can explain your unsubscription by clicking on the link provided in each newsletter e-mail, by sending an e-mail to newsletter(at)baramundi.com or by sending a message to the contact data provided in the disclaimer.

(5) Our newsletters are created so we can gain insights about target groups or the reading behavior of our newsletter subscribers. This is enabled by a so-called web beacon or tracking pixel, which reacts to reader interactions with the newsletter, e.g., whether links are clicked on, whether the newsletter is opened at all, or at what time the newsletter is read. The legal basis for these statistical newsletter evaluations is Art. 6 para. 1 p. 1 lit f GDPR. Our legitimate interests are to analyze and evaluate the success of our newsletters and to optimize our newsletter campaigns.

Integration of Google Analytics

(1) Description and scope of data processing
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4. Google Analytics uses cookies to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. In the case of activation of IP anonymization on this website (see below), however, your IP address will be truncated beforehand by Google within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and then shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

An alternative way to prevent data capture within this website by Google Analytics, especially for mobile devices, is to set an opt-out cookie by clicking on this link: Deactivate Google Analytics. This stores an opt-out cookie on your device that prevents future capture of your data on this website by Google Analytics. If you delete the opt-out cookie, you have to click on the link again to prevent data capture on this website by Google Analytics.

Google Analytics is used on this website with the extension "_anonymizeIp()". This means that IP addresses are processed in a shortened form, thus excluding the possibility of personal references. Insofar as the data collected about you is related to a person, this is therefore immediately excluded and the personal data is thus immediately deleted.

(2) Purpose of data processing
We use Google Analytics to analyze and regularly improve our website. The statistics obtained enable us to improve our offer and make it more interesting for you. 

(3) Consent to the transfer of personal data to a third country
Subject to legal or contractual permissions, personal data may in principle only be processed in a third country if the special requirements of Art. 44 et seq. GDPR are met. Accordingly, the data transfer may be carried out if the European Commission has determined by way of a decision within the meaning of Article 45 (1), (3) of the GDPR that an adequate level of protection is provided under data protection law in the third country concerned. By means of such so-called adequacy decisions, the European Commission certifies to third countries a level of data protection that is comparable to the recognized standard in the European Economic Area (a list of these countries and a copy of the adequacy decisions can be found here: http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.html).

To the extent that data is transferred between the USA and the EU in exceptional cases, it should be noted that no such adequacy decision exists for the USA. Therefore, other suitable guarantees would have to exist in principle to ensure that data protection is sufficiently guaranteed in the USA. This would generally be possible via binding corporate regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognized codes of conduct.

Although Google has submitted to corresponding standard contractual clauses of the European Commission, US companies are nevertheless obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities. Furthermore, you may not be able to assert or enforce your rights to information against Google in the long term. Furthermore, the technical and organizational measures for the protection of personal data at Google may not fully meet the requirements of the GDPR in terms of quantity and quality.

There is thus the possibility that the standard contractual clauses of the European Commission used by Google do not constitute sufficient guarantees within the meaning of Article 46 (2) a) of the GDPR. 

By consenting to the collection of data by Google Analytics, you expressly agree to the data transfer outlined here, whereby you have been informed above of the possible risks of such data transfers without the existence of an adequacy decision and without appropriate safeguards.

This consent can be revoked at any time. A revocation shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. 

(4) Legal basis for data processing
The legal basis is your explicit and voluntary consent pursuant to Art. 6 (1) p. 1 lit. a) GDPR to the processing of your personal data for purposes of analysis and statistics on user behavior using Google Analytics.

(5) Further information 
For more information on the purpose and scope of data collection and its processing, as well as further information on your rights in this regard and setting options for protecting your privacy, please contact: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. user terms: http://google.com/analytics/terms/de.html, as well as the privacy policy: https://policies.google.com/privacy?hl=en&gl=en

Google Ads

(1) We use "Google Ads" (formerly Google Adwords) on our website, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Ltd, Google Building Gordon House, Barrow St, Dublin 4, Ireland ("Google"). We use the services offered by Google Ads to promote our services on external websites with the help of advertising material (so-called Google Ads). By analyzing the data from the advertising campaigns, we are able to evaluate how successful the individual advertising measures are. We are interested in showing you relevant advertising, making our website more interesting for you and achieving a fair calculation of advertising costs.

(2) These advertising materials are delivered by Google via so-called "Ad Servers". For this purpose, we use Ad Server cookies, which make it possible to analyze certain performance measurement parameters such as ad impressions or clicks by users. If you access our website via a Google ad, Google Ads stores a cookie on your personal computer. These cookies typically lose their validity after 30 days and are not supposed to be used to identify you personally. For this cookie, the unique cookie ID, a number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (indicating that the user no longer wishes to be targeted) are typically stored as analysis values.

(3) These cookies enable Google to recognize your Internet browser. If a user visits certain pages of a website that belongs to a Google Ads customer and the cookie stored on their computer has not yet expired, Google and the Google Ads customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Google Ads customer. Therefore, cookies cannot be tracked via the websites of Google Ads customers. We ourselves do not collect or process any personal data in the above-mentioned advertising measures. We merely receive statistical analysis from Google. With the help of this analysis, we can understand which of the advertising measures used are most effective. We do not receive any further data regarding the use of the advertising material; in particular, we cannot identify users based on this information.

(4) Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s server. We have no influence on the scope and subsequent use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating Google Ads, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and save your IP address.

5) We also use the Google Remarketing application included in Google Ads through which we are able to re-contact you. This application enables our advertisements to be displayed to you when you use the Internet after visiting our website. This is achieved using cookies stored in your browser, through which your user behavior is recorded and processed by Google when you visit different websites. This enables Google to ascertain your previous visit to our website. According to Google’s own statements, data obtained within the context of Remarketing will not be merged with your personal data which may have been stored by Google. In particular, according to Google, Remarketing uses data pseudonymization.

(6) You can prevent participation in this tracking process in various ways: 
a) by setting your browser software accordingly, in particular by suppressing third-party cookies you will not receive any ads from third-party providers; 
b) by disabling cookies for conversion tracking by setting your browser at https://www.google.de/settings/ads to block cookies from the domains googleadservices.com, google.com/ads and google.com/ads/measurement, this setting will be deleted when you delete your cookies (for more information on the types of cookies used by Google, please see https://policies.google.com/technologies/types); 
c) by disabling interest-based ads from providers that are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices; this setting will be deleted when you delete your cookies; 
d) by permanently disabling them in your Firefox, Internet Explorer or Google Chrome browsers via the link www.google.com/settings/ads/plugin. We would like to point out that in this case, you may not be able to use all the functions of this offer to their full extent;
e) in the consent banner settings.

(7) We use Google Ads for marketing and optimization purposes, in particular to deliver more relevant ads, improve campaign performance reports and achieve fair calculation of advertising costs. This is also our legitimate interest in the processing of the above data by the third-party provider. Legal basis for the processing of your data is your consent (Art. 6 (1) sentence 1a GDPR).

(8) Your data will be stored in your Google Ads account for a maximum of 18 months.

(9) Your data may be transferred to the USA. This data transfer takes place on the basis of standard contract clauses, which can be viewed at https://policies.google.com/privacy/frameworks.

(10) You can find further information on data protection at Google here: www.google.com/intl/de/policies/privacy and services.google.com/sitestats/en.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.

Social Media Plugins

(1) We currently use the following social media plugins: Facebook, Twitter, Xing and LinkedIn. We use the so-called double-click solution. This means that by default, no personal data are initially sent to plugin providers when you visit our website. You can recognize the provider of the plugin through program information available on your computer, in your browser settings, the plug-in logo, the initials or through other identifiers. We offer you the option to communicate directly with the plugin provider through a button. Only if you click on the marked field and thereby activate it, the plug-in provider receives the information that you have called up the corresponding website. The above-mentioned data (section "Collection of personal data when visiting our website") will also be transmitted. According to the relevant providers in Germany, Facebook and Xing anonymize the IP address immediately after it is collected. By activating the plugin, therefore, your personal data are transmitted to the respective plugin provider and stored there (in the case of US providers in the USA). Since plugin providers acquire these data mainly through cookies, we recommend that you delete all cookies via your browser’s security settings before you activate the plugin.

(2) We have no influence on the collected data or data processing procedures, nor do we have knowledge about the full scale of data acquisition, the purposes for which data are processed, or the storage durations. Similarly, we do not have any information about the deletion of the collected data by the plugin provider.

(3) Plugin providers typically store the data collected about you as user profiles and utilize them for advertising, market research and/or demand-oriented design of their website. Such an analysis is often used to create tailored advertising (even for users who are not logged in) and to inform other users of the respective social network about your activities on our website. You have a right to object to the creation of such user profiles and have to contact the respective plugin provider directly if you wish to exercise this right. Through the plugins we enable you to interact with the social networks and other users. The processing of your personal data when you visit one of our social media services is based on our legitimate interests in a diverse external presentation of our company and the use of an effective information opportunity and communication with you. The legal basis for this is Art. 6 Para. 1 lit. f GDPR. Possibly, you have also given a platform operator consent to data processing, in which case Art. 6 para. 1 lit. a GDPR is the legal basis.

(4) Data are forwarded irrespective of whether you have an account with the plugin provider or whether you are currently logged in to said account. If you are logged in with the plugin provider your data which are collected by us are directly associated with your account with the plugin provider. If you activate the plugin and, for example link to the site, the plugin provider also stores this information in your user account and shares this publicly with your contacts. We recommend logging out regularly after using a social network, but especially before you activate the plugin. In this way you can avoid any association with your profile at the plugin provider.

(5) Additional information about the purpose and scale of data collection and the processing of these data by the plugin provider is contained in the data protection declarations of these providers notified below. These declarations also provide you with additional information concerning your associated rights and settings options for the protection of your privacy.

(6) Addresses of the respective plug-in providers and URLs with their privacy notices:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection:
http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications 
and http://www.facebook.com/about/privacy/your-info#everyoneinfo. The data transfer to the USA is based on standard contract clauses. 
b) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. The data transfer to the USA is based on standard contract clauses.
c) Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy.
d) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. The data transfer to the USA is based on standard contract clauses.

Facebook Custom Audience (Facebook Pixel) 

This website uses the "Custom Audience" remarketing feature of Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or its EU representative Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). As a result, Facebook users may be presented with interest-related advertisements ("Facebook Ads") when they visit the social network Facebook or other websites also using the procedure.

We are thus pursuing the interest in displaying advertising that is of interest to you in order to make our website more interesting for you. Legal basis for the processing of your data is your consent (Art. 6 (1) sentence 1f GDPR).

Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool (Facebook is responsible for this) and therefore inform you according to our state of knowledge: Through the integration of Facebook Custom Audience, Facebook receives usage data for every action on our website, e. g. the information that you have called up the corresponding website of our Internet presence or clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider will find out and store your IP address and other identification features. For more details on how Facebook pixels work, please visit https://www.facebook.com/business/help/651294705016616. For more information on data processing by Facebook, please visit https://www.facebook.com/about/privacy.

A data transfer to the USA is based on standard contract clauses. You can find more information here: https://www.facebook.com/legal/EU_data_transfer_addendum.

You can object to the use of the Facebook pixel here or as a user logged on to Facebook at https://www.facebook.com/settings/.

LinkedIn Insight Tag

baramundi uses the LinkedIn Insight Tag from LinkedIn (LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland) to track conversions, retarget our website visitors and obtain additional information about members who view our ads. We also use this information to display interest-specific and relevant offers and recommendations after you have expressed interest in certain products, information and offers on our website. 

The LinkedIn Insight Tag allows baramundi to collect data including URL, referrer URL, IP address, device and browser properties (user agent) and timestamps. IP addresses are truncated or (if used to reach members across devices) hashed. The direct identifiers of members are removed within seven days to pseudonymize the data. This remaining pseudonymized data is then deleted within 180 days. You can at any time read about the data processing by LinkedIn at https://www.linkedin.com/legal/privacy-policy and object to it. We use the LinkedIn Insight Tag to design our website according to your needs and to advertise it (legitimate interest according to Art. 6 (1) sentence 1f GDPR).

LinkedIn members can control the use of their personal information for promotional purposes in their account settings. To disable LinkedIn on our website, click here if you have a LinkedIn account: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out or here if you are a LinkedIn guest: https://www.linkedin.com/psettings/guest-controls. You can also object directly via our consent banner.

The LinkedIn services require that data be transferred to the USA. The data transfer is based on standard contractual clauses. Information on this can be found here: https://www.linkedin.com/help/linkedin/answer/62533?trk=microsites-frontend_legal_privacy-policy.

YouTube videos

(1) We have integrated YouTube videos into our online service, which are stored at http://www.youtube.com and can be played directly from our website. These are all integrated in “enhanced data protection mode”, i.e. no data about you is transmitted to YouTube provided that you do not play the videos. The data mentioned above (section "Collection of personal data when visiting our website") will only be transmitted if you play the videos. We have no influence on this data transmission. 

(2) By visiting the site, YouTube is informed that you have visited the appropriate subpage of our site. In addition, the above-mentioned data is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in, or whether no user account exists. If you are logged in at a website or service operated by Google, your data generated while using YouTube will be assigned directly to your account profile. If you do not want the assignment with your profile on YouTube, you have to log out of either Google, YouTube, or both before playing a video. YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out (even for users who are not logged in) to provide interest-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you have to contact YouTube to exercise this right.

(3) Additional information about the purpose and scale of data collection and processing by YouTube is contained in the data-protection declaration. This declaration also provides you with additional information concerning your rights and settings options with regard to the protection of your privacy: https://policies.google.com/privacy.

(4) Google also processes your personal data in the USA according to standard contract clauses: https://policies.google.com/privacy/frameworks.

(5) Legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 (1) sentence 1aGDPR).

Google Tag Manager

Google Tag Manager is a service of Google Inc. (“Google”), 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. It is used on this website to implement website tags into the website through an interface and to manage them centrally. Google Tag Manager does not use cookies and does not collect personal data. The purpose of this tool is to trigger other tags, which may collect data. However, Google Tag Manager does not access these data. Deactivation at domain or cookie level will also affect all tracking tags which were implemented with Google Tag Manager.

baramundi Mobile Devices (bMD)

baramundi Mobile Devices, the solution for managing mobile devices, has been designed and developed with the utmost care in compliance with German data privacy regulations. Our solution supports administrators in securely integrating mobile devices into their company’s internal IT infrastructure. The solution is concerned with managing devices, not the content of applications.

For the baramundi Mobile Devices (bMD) module, we warrant that the design of the baramundi Management Suite combined with the locally installed baramundi Agent app precludes the following activities:

  • bMD does not read any contact data (names, telephone numbers, etc.) from the address book
  • bMD cannot record SMS text messages (neither connection lists nor content)
  • bMD does not enable access to the content of e-mail boxes.
  • bMD does not record any call lists
  • bMD does not enable access to the content of other communications apps such as WhatsApp
  • bMD cannot intercept phone calls
  • bMD does not have access to the microphone in order to tap the surroundings
  • bMD does not enable access to media files (images, videos, etc.)
  • bMD does not store location information locally, nor is it transmitted to the server. The only exception is iOS devices in “lost” mode. 

The following types of access to smartphone hardware are used to only a very limited extent:

  • bMD accesses the camera only in order to read the QR code as part of the registration process
  • bMD uses iOS location services to locate a device in “lost” mode. If lost mode is activated, the user receives a corresponding message.
  • bMD requires access to the location services under Android Enterprise in the "Fully Managed" and “Dedicated Device“ profile to inventory the Wifi networks stored on the device.
  • bMD requires access to the location services under Android Enterprise in the "Work Profile" to inventory the Wifi networks stored in the profile. Wifi networks manually created on the device by the user are not transferred to the server.

bMD is in fact designed to perform the following typical management activities (this list is not exhaustive):

  • Creating an inventory of the installed apps 
  • Detecting manipulations of firmware (Jailbreak*, Root)
  • Configuring security features and restrictions 
  • Remote removal of the device/installed apps

*) To optimize manipulation detection for iOS, we recommend using baramundi’s push service infrastructure. Here, the baramundi management server transmits the following data to a central baramundi service:

  • A clear, anonymous identifier for the bMS installation 
  • The push token generated by Apple for the device 
  • The iOS version of the device
  • The version of the bMD Agent app 

This function can be activated in the bMD configuration and is disabled by default.

A more detailed description of bMD’s features can, for example, be found in the release notes.

Google reCAPTCHA

We use the reCAPTCHA feature of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). This function is primarily intended to distinguish whether an entry is made by an individual or is improperly made by machine and automated processing. The service includes the transmission of the IP address and if applicable of further data needed by Google to Google for operation of the reCAPTCHA service, and takes place in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in determining the individual authenticity of Internet activities and to prevent misuse and spam.

Google LLC with headquarters in the USA has concluded standard contract clauses for data transfers to the USA, which can be found at: https://policies.google.com/privacy/frameworks. Further information about Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.

Google Maps

(1) On this website we use the services of Google Maps, a service of the provider Google LLC (“Google”), 1600 Amphiteatre Parkway, Mountain View, CA 94043, USA. This enables us to display interactive maps directly on the website and enables you to use the map function conveniently.

(2) The integration of the Google Maps service is necessary for the demand-oriented design of our website. This is also our legitimate interest as the person responsible for data processing in accordance with Art. 6 (1) sentence 1f GDPR.
Google is responsible for further data processing. By visiting the website, Google receives the information that you have called up the corresponding subpage of our website. In addition, the data already mentioned above (section "Collection of personal data when visiting our website") will be transmitted. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not want the assignment with your profile at Google, you have to log out before activating the button. Google stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the purpose of providing need-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you have to contact Google to exercise this right. 

(3) For more information on the purpose and scope of data collection and processing, please refer to the Google privacy policy. There you will also find further information on your rights and settings to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has standard contract clauses, https://policies.google.com/privacy/frameworks.

Google Play Store App

In order to provide advanced management capabilities in the baramundi Mobile Agent, a device administrator is configured on your device, which you may need to enable. The app does not independently make any automatic changes to the device configuration; this can only be done by the authorized IT administrators.

Windows Phone and iOS App

In order to provide the extended management capabilities, the baramundi Mobile Agent must be installed on your device. The app does not independently make any automatic changes to the device configuration; this can only be done by the authorized IT administrators.

Change of privacy policy

This privacy statement is currently valid and is dated May 2018. As our website evolves and offers become available, or as a result of changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The respective current privacy policy can be viewed and printed by you at any time on the website at https://www.baramundi.com/en-gb/contact/privacy-policy/.

Updated on 2021-07-28