Privacy

Background and terms

This data protection declaration informs you about the type, scope and purpose of the processing of your personal data by the data protection officer in accordance with. Art. 13 and 14 of the General Data Protection Regulation (GDPR).

Scope of application and responsibility

This privacy policy applies to the website of Carano Software Solutions GmbH (“Carano”), which is accessible under the domain https://www.carano.de.

The responsible party for data processing on this website is:

Carano Software Solutions GmbH
Bornstraße 32, 12163 Berlin
Phone: +49 30 399944-0
Fax: +49 30 399944-99
E-mail: info@carano.de

Data Protection Officer

We have appointed a data protection officer who can be contacted as follows:
C. Rocco Wittig
agentia Wirtschaftsdienst
Bornstraße 32,
12163 Berlin
Phone: +49 30 399944-0
Fax: +49 30 399944-99
E-mail: datenschutz@carano.de

Processing of your data at Carano

How is your data processed in detail?

Below we inform you about the individual processing operations, the purpose of the data processing, the categories of processed data, the categories of recipients, whether a third country data transfer takes place, the legal basis, the obligation to provide your data and the respective storage period.

An automated decision in individual cases, including profiling, does not take place.

Data processing website

Website presentation

Purpose

We collect your data for the provision of the website (multilingual), to offer the availability of associated services, for an efficient design of the website and to ensure the security of the website.

Categories of processed data

The IP address, the Internet service provider of the accessing system, the date and time of access to the website, the browser type and version used, the operating system used by the accessing system and the website from which an accessing system accesses our website are stored.

Categories of recipients

Your data will be passed on to the website host’s employees.

Third country data transfer

There is no transfer to third countries.

Legal basis

Your data is collected on the basis of Art. 6 para. 1 b) GDPR (fulfillment of contract) and Art. 6 para. 1 a) GDPR (legitimate interest).

Storage period and its criteria

The data is stored for the duration of the website display.

Contact form

Purpose

We collect your data for the purpose of contacting you.

Categories of processed data

Your name, e-mail address, company data, telephone number and the notes you provide will be stored.

Categories of recipients

Your data will be passed on to Carano employees.

Third country data transfer

There is no transfer to third countries.

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 b) GDPR (fulfillment of contract).

Storage period and its criteria

The deletion takes place after the purpose has ceased to exist.

Request by e-mail, phone or fax

Purpose

We collect your data for the purpose of contacting you.

Categories of processed data

Your name and the request will be saved.

Categories of recipients

Your data will be passed on to Carano employees.

Third country data transfer

There is no transfer to third countries.

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 b) GDPR (fulfillment of contract).

Storage period and its criteria

The collection of your data takes place on the basis of Art. 6 para. 1 b) GDPR (fulfillment of contract).

Newsletter

Purpose

We collect your data to receive the newsletter, to analyze our newsletter campaign and to target the newsletter to specific recipients (e.g. by age, gender or place of residence).

Categories of processed data

Your name and e-mail address will be stored.

Categories of recipients

Your data will be passed on to employees of Carano and Brevo.

Third country data transfer

There is no transfer to third countries.

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 a) GDPR (consent).

Storage period and its criteria

The deletion takes place after the purpose has ceased to exist.

Participation in surveys

Purpose

We collect your personal data in order to improve our service by letting you participate in surveys about new products.

Categories of processed data

The IP address, the Internet service provider of the accessing system, the date and time of access to the website, the browser type and version used, the operating system used by the accessing system and the website from which an accessing system accesses our website are stored.

When you sign in to your Google account, your entries in the Google form are automatically saved. This means you can work on a form on several devices or take a break without losing your progress.

Categories of recipients

Your data will be passed on to Carano employees and Google.

Third country transfer

Data is transferred to third countries with certification in accordance with the EU-U.S. Data Privacy Framework.

Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043 USA

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 f) GDPR (legitimate interest)

Storage period and its criteria

The results are evaluated directly and then deleted.
When you sign in to your Google account, your entries in Google forms are automatically saved for 30 days. Once the survey has been completed, the results are analyzed directly and then deleted.

Consent management

Purpose

We collect your data to obtain and store the consent of our website users to use the services offered on our website.

Categories of processed data

Your IP address, the date and time of consent, the browser information and the URL from which the consent was sent are stored.

Categories of recipients

Your data will be passed on to employees of Carano and Borlabs.

Third country data transfer

There is no transfer to third countries.

Legal basis

  • The collection of your data takes place on the basis of Art. 6 para. 1 c) GDPR (legal obligation).

Storage duration

The deletion takes place after the purpose has ceased to exist.

WPML

Purpose

We collect your data to display the website in different languages and to save the language selection on the website.

Categories of processed data

Your click data, device information, operating system and your P-address are stored.

Categories of recipients

Your data will be passed on to Carano employees.

Third country data transfer

A third country transfer takes place.
(OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong)

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 f) GDPR (legitimate interest).

Storage duration

WPML stores cookies on your end device. Information on the storage duration of cookies can be found at: https://wpml.org/documentation/privacy-policy-and-gdpr-compliance

Data processing webinars

GoToWebinar

Purpose

We collect your data for the purpose of conducting webinars.

Categories of processed data

Your contact details, e-mail address, your organization, the participation link, the webinar metadata and the content of the discussion will be stored.

Categories of recipients

Your data will be passed on to employees of Carano and GoTo, Inc.

Third country data transfer

There is no transfer to third countries.

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 b) GDPR (performance of a contract).

Storage duration

The deletion takes place after the purpose has ceased to exist.

Data processing, analysis tools and advertising

Google Ads

Purpose

We collect your data in order to be able to show you targeted and effective advertising.

Categories of processed data

Click data, impression data, conversion data, geographic data, device information, browser information and your IP address are stored.

Categories of recipients

Your data will be passed on to employees of Carano and Google.

Third country data transfer

A third country transfer takes place in accordance with the EU-U.S. Data Privacy Framework certification.
(Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA)

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 a) GDPR (consent).

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.

Microsoft Advertising

Purpose

On our website, we use Microsoft Advertising, a service of the Microsoft Corporation, to display personalized advertisements and to analyze the effectiveness of our advertising measures.

Categories of processed data

Your IP address, the browser type and version, the operating system used, the referrer URL (the previously visited page), the date and time of access, your click behavior and pages visited may be stored.

Categories of recipients

Your data will be passed on to Microsoft employees.

Third country data transfer

Data is transferred to third countries with certification in accordance with the EU-U.S. Data Privacy Framework.

Microsoft Corporation
One Microsoft Way,
Redmond, WA 98052-6399, USA

Storage period and its criteria

After the end of the purpose or revocation of your consent.
You can object to the collection and storage of data by Microsoft Advertising at any time by using the following opt-out options: Browser settings: You can prevent the storage of cookies by selecting the appropriate settings in your browser software.
Opt-out page: Visit the Microsoft Advertising opt-out page at https://account.microsoft.com/privacy/ad-settings/signedout

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 f) GDPR (legitimate interest).

Google Analytics

Purpose

We collect your data to evaluate user behavior, to recognize users and to report on website activity.

Categories of processed data

Click data, impression data, conversion data, geographic data, device information, browser information and your IP address are stored.

Categories of recipients

Your data will be passed on to employees of Carano and Google.

Third country data transfer

A third country transfer takes place in accordance with the EU-U.S. Data Privacy Framework certification.
(Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA)

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 a) GDPR (consent).

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.

Softwareabc24.de-Pixel

Purpose

We use the Softwareabc24.de pixel on our website to analyze and optimize our website and to improve our marketing measures.

Categories of processed data

Your IP address, the browser type and version, the operating system used, the referrer URL (the previously visited page), the date and time of access, your click behavior and pages visited may be stored.

Categories of recipients

Your data will be passed on to Microsoft employees.

Third country data transfer

There is no transfer of data to third countries.

Storage period and its criteria

After expiry of statutory retention periods or after the purpose has ceased to exist.

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 f) GDPR (legitimate interest).

Tracking Pixel from Capterra

Purpose

We use the tracking pixel of Capterra Inc. on our website to analyze and improve the use of our website. A tracking pixel is a small image that is integrated into a website and enables us to track the behavior of visitors to our website.

Categories of processed data

Your IP address, the browser type and version, the operating system used, the referrer URL (the previously visited page), the date and time of access, your click behavior and pages visited may be stored.

Categories of recipients

Your data will be passed on to employees of Carano and Capterra.

Third country data transfer

Data is transferred to third countries with certification in accordance with the EU-U.S. Data Privacy Framework.

Capterra Inc.
1201 Wilson Blvd,
Fl 9 Arlington,
VA 22209-2300 USA

Storage period and its criteria

Your personal data will only be stored for as long as is necessary for the above-mentioned purposes or as required by the statutory retention periods.

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 f) GDPR (legitimate interest).

Data processing plugins and tools

Google Maps

Purpose

We collect your data to display the map service.

Categories of processed data

We collect your data to display the map service.

Categories of recipients

Your data will be passed on to employees of Carano and Google.

Third country data transfer

A third country transfer takes place in accordance with the EU-U.S. Data Privacy Framework certification.
(Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA)

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 a) GDPR (consent).

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.

Youtube

Purpose

We collect your data to enable you to play videos.

Categories of processed data

We collect your data to enable you to play videos.

Categories of recipients

Your data will be passed on to employees of Carano and Google.

Third country data transfer

A third country transfer takes place in accordance with the EU-U.S. Data Privacy Framework certification.
(Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA)

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 f) GDPR (legitimate interest).

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.

Salesviewer

Purpose

We collect your data for marketing, market research and optimization purposes.

Categories of processed data

Your IP address and company-related data are stored.

Categories of recipients

Your data will be passed on to employees of Carano and Salesviewer.

Third country data transfer

There is no transfer to third countries.

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 a) GDPR (consent).

Storage duration

You can object to the collection and storage of data at any time with effect for the future by clicking on this link: https://www.salesviewer.com/opt-out.

Data processing whistleblower system

Purpose

Carano has legal obligations to carry out a whistleblowing process. To this end, we have defined a process and implemented an electronic reporting channel. Personal data of whistleblowers, any suspects and witnesses as well as the respective processors are stored and used.

Categories of processed data

When a report is received, the whistleblower’s e-mail address and the content of the report are saved. If specified, other contact details such as the name are also stored. When investigating the facts of the case, further data from the accused and witnesses and substantive information on the facts of the case are then added if necessary.

The personal data listed below may be subject to processing in relation to the respective category of data subject:

Persons who report a suspected unethical or illegal situation

  • Contact details (unless the report was made anonymously)
  • the personally observed facts that could give rise to suspicion of unethical or illegal actions

Persons who are suspected of having behaved unethically or unlawfully as a result

  • the personally observed facts that could give rise to suspicion of unethical or illegal actions

Other persons, such as witnesses

  • the personally observed facts that substantiate or refute the suspicion

People who process the cases

  • Documentation of the investigation activities

Categories of recipients

The initial recipient of the notification is Carano’s data protection officer. They will also process the message initially. Depending on the facts of the case and the necessity, other departments may be involved in the processing. These can be internal bodies such as the HR department, the finance department and the management, but also external bodies such as law firms or law enforcement agencies. Confidentiality is observed when disclosing information.

Third country data transfer

There is no transfer to third countries.

Legal basis

The collection of your data takes place on the basis of Art. 6 para. 1 c) GDPR (processing due to legal obligations)

Storage period and its criteria

The data is stored until the purpose for which it was collected no longer applies and there are no statutory retention obligations to the contrary.

In principle, the data is stored for three years after the end of the year in which it was collected (regular limitation period under civil law). If the data became the subject of criminal, civil or administrative proceedings, the retention period is extended by the duration of the respective proceedings.

Rights of data subjects

If your personal data is processed, you are a data subject within the meaning of the GDPR. You have the following rights vis-à-vis the controller:

Those affected have the right:

  • pursuant to Art. 7 para. 3 GDPR to revoke your consent to Carano at any time. As a result, Carano may no longer continue the data processing that was based on this consent in the future;
  • to request information about your personal data processed by Carano in accordance with Art. 15 GDPR. In particular, they may request information about the purposes of processing, the category of personal data, the categories of recipients to whom their data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of their data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
  • in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by carano;
  • in accordance with Art. 17 GDPR, to demand the deletion of their personal data stored by Carano, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
  • in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and Carano no longer needs the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to Carano in a structured, commonly used and machine-readable format or to request transmission to another controller, and
  • to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, data subjects can contact the supervisory authority of their usual place of residence or workplace in Berlin.

Current status: July 2024