The legal fundamentals for data protection are to be found in the GDPR (General Data Protection Regulation), the Bundesdatenschutzgesetz (Federal Data Protection Law) and the Telemediengesetz (Telemedia Law).
D-81829 Munich, Germany
Yves Padrines (CEO), Louise Öfverström, Viktor Várkonyi, Jon Elliott
We are committed to protecting your privacy whether you are visiting or browsing our ONE platform or commenting on a site on our ONE platform.
In the case of merely informative use of the website, i.e. when you don’t register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server.
If you wish to view our website, we collect the following information that is technically necessary for us to display our website and to ensure its stability and safety. (The legal basis is the legitimate interest according to Art. 6 para. 1 sentence 1 lit. f GDPR)
As part of the balancing of interests under Art. 6 para. 1 lit. f GDPR, we have considered and balanced our interest in the provision and your interest in the processing of your personal data compliant with data privacy. Since the following data for the provision of our service is sometimes technically necessary to provide you with our website and also to ensure its stability and security, in particular to offer protection against misuse, we have come to the conclusion that this data - in a state-of-the-art data security guarantee - can be processed, taking due account of your interest in privacy-compliant processing.
Personal data collected might include the following:
- the Internet domain for your Internet service provider, such as 'company.com' or 'service.ca' and the anonymized IP address of the computer accessing the Web site, such as '123.456.xxx.xxx';
- the type and version of browser you are using, such as Internet Explorer or Netscape Navigator;
- the type and version of operating system you are using, such as Windows or Macintosh;
- the date and time you visit our site and web pages that you visit on our site, along with the address of the previous website you were visiting if you linked to us from another website
This information are not merged by us with other data, so that no conclusions can be drawn about individual persons. The collection of data for the provision of the website and the storage of the data in log files is necessary for the operation of the website. The user consequently does not have an opt-out option.
Only if you choose to register on ONE and include your personal information or comment on a site on ONE, we will collect your information and only use the information that you submit to us for the purpose of providing requested information and for communicating with you.
Within the scope of registration, the required mandatory data are communicated to the users and processed for the purpose of providing the user account. The processed data includes in particular the login information (name, password and an e-mail address). The data entered during registration will be used for the purpose of using the user account and its purpose.
For registration to ONE, we use the double-opt-in procedure. This means that after stating your e-mail address, we will send you a confirmation e-mail to the specified e-mail address requesting your confirmation. If you confirm, we will activate your ONE account and additionally use your e-mail address to send you latest ONE-news via e-mails (email service). Processing is necessary to protect our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR respectively for the performance of a contract pursuant to Art. 6 para. 1 lit. b GDPR.
In addition to the personal data required for successful registration, ONE users have the opportunity to create a personal profile on ONE. The entry of profile data and the upload of images are voluntary. We hereby point out that the voluntary profile information within the ONE platform is visible to all ONE users. By voluntarily providing profile data, you consent to publication within the ONE platform.
You can unsubscribe from the email service at any time by sending an email to firstname.lastname@example.org.
The sole purpose of the storage is to be able to send you the desired information. Furthermore, we store your IP addresses and the times when registering and confirming, in order to prevent misuse of your personal data. Mandatory information are only your surname, first name and e-mail address. The specification of further information not marked as mandatory is voluntary.
As part of the use of our registration and login functions as well as the use of the user account, we store the IP address and the time of the respective user action. The data is stored on the basis of our legitimate interests as well as the user's protection against misuse and other unauthorized use. A passing on of this data to third parties does not take place in principle, unless it is necessary to pursue our claims or there is a legal obligation in accordance with Art. 6 para. 1 lit. c. GDP.
None of the information you submit to us or that may be gathered automatically from your visit to our website is stored or hosted on networked databases, and therefore this information cannot be improperly accessed from outside of our company’s computer systems.
If we disclose data to other persons/companies (contract processors or third parties) within the scope of our processing, transmit it to them or otherwise grant them access to the data, this shall only take place on the basis of a legal permission (e.g. if a transmission of the data to third parties, such as payment service providers, in accordance with Art. 6 Para. 1 lit. b GDPR for contract fulfilment is necessary), if you have consented, if a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties with the processing of data on the basis of a so-called "data processing agreement", this is done on the basis of Art. 28 GDPR.
We will not share, sell, rent, or otherwise provide any information that you submit to us with any persons outside the company or with any external company or organization. This applies also for contained links on ONE to other websites. We do not provide any of your information to these third parties without your consent. Please note that we have no influence on the fact that these providers respect the data protection regulations.
If users leave comments or other contributions, their IP addresses may be used on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR. This takes place for our safety, if someone leaves illegal contents in comments and contributions (insults, forbidden political propaganda, etc.). In this case we can be prosecuted ourselves for the comment or contribution and are therefore interested in the identity of the author.
Furthermore, we reserve the right, on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f. GDPR to process user information for spam detection.
The data provided in the context of comments and contributions will be permanently stored by us until the user objects.
Cookies – different types of cookie
a) Technically necessary cookies
b) Cookies for reach metrics
Cookies for reach metrics collect information about the utilisation of our website, such as webpage accesses or error messages. These cookies do not store any information that can be used to identify the user. The information collected will only be aggregated and thus be evaluated anonymously.
(1) Matomo (formerly Piwik)
If you do not agree to the storage and evaluation of this data, you can subsequently object to storage and use at any time with the click of a mouse. If you do so, an “opt-out cookie” will be set in your browser so that Matomo does not collect any session data whatsoever.
Note: If you delete your cookies, this will also delete the opt-out cookie and you will need to reactivate it.
c) Cookies for marketing purposes
Every data subject has the right to information in accordance with Article 15 of the GDPR, the right of correction in accordance with Article 16 of the GDPR, the right of deletion in accordance with Article 17 of the GDPR, the right of restriction of processing in accordance with Article 18 of the GDPR, the right of objection from Article 21 of the GDPR and the right of data portability from Article 20 of the GDPR. The limitations in accordance with Sections 34 and 35 of the German Federal Data Protection Act apply to the right of information and the right of deletion.
You also have the right to raise a complaint with the appropriate data protection supervisory authority regarding our processing of your personal data.
You can revoke your consent granted to us to process your personal data at any time. This also applies to revoking declarations of consent that were granted before the General Data Protection Regulation came into effect on 25 May 2018. Please note that revocation applies to the future. Processing that has already taken place before revocation is not affected by this.
If we support the processing of your personal data based on the weighing of interests, you can object to processing. In the event that you do object, we will ask you to explain your reasoning as to why we should not process your personal data in the manner described. If your objection is founded, we will review the circumstances and either cease/adjust our processing of data, or we will explain our compelling legitimate grounds.
Our websites may contain links to the websites of other providers. Please note that this privacy statement only applies to the websites of one.nemetschek.com. We do not have any influence over and do not monitor whether other providers are compliant with applicable data protection regulations.
We reserve the right to change or adjust these privacy statement at any time in compliance with the applicable data protection regulations.