Privacy

Background and terms

This data protection declaration informs you about the type, scope and purpose of the processing of your personal data by the data protection officer in accordance with. Art. 13 and 14 of the General Data Protection Regulation (GDPR).

Scope of application and responsibility

This privacy policy applies to the website of Carano Software Solutions GmbH (“Carano”), which is accessible under the domain https://www.carano.de.
The privacy policy for our careers page and the process can be found at https://caranosoftwaresolutionsgmbh.softgarden.io/de/data-security?0.

The responsible party for data processing on this website is:

Carano Software Solutions GmbH
Bornstraße 32, 12163 Berlin
Phone: +49 30 399944-0
Fax: +49 30 399944-99
E-mail: info@carano.de

Data Protection Officer

We have appointed a data protection officer who can be contacted as follows:
C. Rocco Wittig
agentia business service
Bornstraße 32,
12163 Berlin
Phone: +49 30 399944-0
Fax: +49 30 399944-99
E-mail: datenschutz@carano.de

Processing of your data at Carano

How is your data processed in detail?

Below we inform you about the individual processing operations, the purpose of the data processing, the categories of processed data, the categories of recipients, whether a third country data transfer takes place, the legal basis, the obligation to provide your data and the respective storage period.

An automated decision in individual cases, including profiling, does not take place.

Data processing website

Website presentation

Purpose

We collect your data for the provision of the website (multilingual), to offer the availability of associated services, for an efficient design of the website and to ensure the security of the website.

Categories of processed data

The IP address, the Internet service provider of the accessing system, the date and time of access to the website, the browser type and version used, the operating system used by the accessing system and the website from which an accessing system accesses our website are stored.

Categories of recipients

Your data will be passed on to the website host’s employees.

Third country data transfer

There is no transfer to third countries.

Legal basis

Your data is collected on the basis of Art. 6 para. 1 b) GDPR (fulfillment of contract) and Art. 6 para. 1 a) GDPR (legitimate interest).

Storage period and its criteria

The data is stored for the duration of the website display.

Contact form

Purpose

We collect your data for the purpose of contacting you.

Categories of processed data

Your name, e-mail address, company data, telephone number and the notes you provide will be stored.

Categories of recipients

Your data will be passed on to Carano employees.

Third country data transfer

There is no transfer to third countries.

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 b) GDPR (fulfillment of contract).

Storage period and its criteria

The deletion takes place after the purpose has ceased to exist.

Request by e-mail, phone or fax

Purpose

We collect your data for the purpose of contacting you.

Categories of processed data

Your name and the request will be saved.

Categories of recipients

Your data will be passed on to Carano employees.

Third country data transfer

There is no transfer to third countries.

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 b) GDPR (fulfillment of contract).

Storage period and its criteria

The collection of your data takes place on the basis of Art. 6 para. 1 b) GDPR (fulfillment of contract).

Newsletter

Purpose

We collect your data to receive the newsletter, to analyze our newsletter campaign and to target the newsletter to specific recipients (e.g. by age, gender or place of residence).

Categories of processed data

Your name and e-mail address will be stored.

Categories of recipients

Your data will be passed on to employees of Carano and Brevo.

Third country data transfer

There is no transfer to third countries.

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 a) GDPR (consent).

Storage period and its criteria

The deletion takes place after the purpose has ceased to exist.

Consent management

Purpose

We collect your data to obtain and store the consent of our website users to use the services offered on our website.

Categories of processed data

Your IP address, the date and time of consent, the browser information and the URL from which the consent was sent are stored.

Categories of recipients

Your data will be passed on to employees of Carano and Borlabs.

Third country data transfer

There is no transfer to third countries.

Legal basis

  • The collection of your data takes place on the basis of Art. 6 para. 1 c) GDPR (legal obligation).

Storage duration

The deletion takes place after the purpose has ceased to exist.

WPML

Purpose

We collect your data to display the website in different languages and to save the language selection on the website.

Categories of processed data

Your click data, device information, operating system and your P-address are stored.

Categories of recipients

Your data will be passed on to Carano employees.

Third country data transfer

A third country transfer takes place.
(OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong)

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 f) GDPR (legitimate interest).

Storage duration

WPML stores cookies on your end device. Information on the storage duration of cookies can be found at: https://wpml.org/documentation/privacy-policy-and-gdpr-compliance

Data processing webinars

GoToWebinar

Purpose

We collect your data for the purpose of conducting webinars.

Categories of processed data

Your contact details, e-mail address, your organization, the participation link, the webinar metadata and the content of the discussion will be stored.

Categories of recipients

Your data will be passed on to employees of Carano and GoTo, Inc.

Third country data transfer

There is no transfer to third countries.

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 b) GDPR (performance of a contract).

Storage duration

The deletion takes place after the purpose has ceased to exist.

Data processing, analysis tools and advertising

Google Ads

Purpose

We collect your data in order to be able to show you targeted and effective advertising.

Categories of processed data

Click data, impression data, conversion data, geographic data, device information, browser information and your IP address are stored.

Categories of recipients

Your data will be passed on to employees of Carano and Google.

Third country data transfer

A third country transfer takes place in accordance with the EU-U.S. Data Privacy Framework certification.
(Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA)

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 a) GDPR (consent).

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.

Google Analytics

Purpose

We collect your data to evaluate user behavior, to recognize users and to report on website activity.

Categories of processed data

Click data, impression data, conversion data, geographic data, device information, browser information and your IP address are stored.

Categories of recipients

Your data will be passed on to employees of Carano and Google.

Third country data transfer

A third country transfer takes place in accordance with the EU-U.S. Data Privacy Framework certification.
(Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA)

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 a) GDPR (consent).

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.

Data processing plugins and tools

Google Maps

Purpose

We collect your data to display the map service.

Categories of processed data

We collect your data to display the map service.

Categories of recipients

Your data will be passed on to employees of Carano and Google.

Third country data transfer

A third country transfer takes place in accordance with the EU-U.S. Data Privacy Framework certification.
(Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA)

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 a) GDPR (consent).

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.

Youtube

Purpose

We collect your data to enable you to play videos.

Categories of processed data

We collect your data to enable you to play videos.

Categories of recipients

Your data will be passed on to employees of Carano and Google.

Third country data transfer

A third country transfer takes place in accordance with the EU-U.S. Data Privacy Framework certification.
(Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA)

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 f) GDPR (legitimate interest).

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.

Salesviewer

Purpose

We collect your data for marketing, market research and optimization purposes.

Categories of processed data

Your IP address and company-related data are stored.

Categories of recipients

Your data will be passed on to employees of Carano and Salesviewer.

Third country data transfer

There is no transfer to third countries.

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 a) GDPR (consent).

Storage duration

You can object to the collection and storage of data at any time with effect for the future by clicking on this link: https://www.salesviewer.com/opt-out.

Data processing whistleblower system

Purpose

Carano has legal obligations to carry out a whistleblowing process. To this end, we have defined a process and implemented an electronic reporting channel. Personal data of whistleblowers, any suspects and witnesses as well as the respective processors are stored and used.

Categories of processed data

When a report is received, the whistleblower’s e-mail address and the content of the report are saved. If specified, other contact details such as the name are also stored. When investigating the facts of the case, further data from the accused and witnesses and substantive information on the facts of the case are then added if necessary.

The personal data listed below may be subject to processing in relation to the respective category of data subject:

Persons who report a suspected unethical or illegal situation

  • Contact details (unless the report was made anonymously)
  • the personally observed facts that could give rise to suspicion of unethical or illegal actions

Persons who are suspected of having behaved unethically or unlawfully as a result

  • the personally observed facts that could give rise to suspicion of unethical or illegal actions

Other persons, such as witnesses

  • the personally observed facts that substantiate or refute the suspicion

People who process the cases

  • Documentation of the investigation activities

Categories of recipients

The initial recipient of the notification is Carano’s data protection officer. They will also process the message initially. Depending on the facts of the case and the necessity, other departments may be involved in the processing. These can be internal bodies such as the HR department, the finance department and the management, but also external bodies such as law firms or law enforcement agencies. Confidentiality is observed when disclosing information.

Third country data transfer

There is no transfer to third countries.

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 c) GDPR (processing due to legal obligations)

Storage period and its criteria

The data is stored until the purpose for which it was collected no longer applies and there are no statutory retention obligations to the contrary.

In principle, the data is stored for three years after the end of the year in which it was collected (regular limitation period under civil law). If the data became the subject of criminal, civil or administrative proceedings, the retention period is extended by the duration of the respective proceedings.

Rights of data subjects

If your personal data is processed, you are a data subject within the meaning of the GDPR. You have the following rights vis-à-vis the controller:

Those affected have the right:

  • pursuant to Art. 7 para. 3 GDPR to revoke your consent to Carano at any time. As a result, Carano may no longer continue the data processing that was based on this consent in the future;
  • to request information about your personal data processed by Carano in accordance with Art. 15 GDPR. In particular, they may request information about the purposes of processing, the category of personal data, the categories of recipients to whom their data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of their data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
  • in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by carano;
  • in accordance with Art. 17 GDPR, to demand the deletion of their personal data stored by Carano, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
  • in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and Carano no longer needs the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to Carano in a structured, commonly used and machine-readable format or to request transmission to another controller, and
  • to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, data subjects can contact the supervisory authority of their usual place of residence or workplace in Berlin.

Current status: November 2023