We are pleased that you are visiting the smart5 Group website. The protection of your personal data is very important to us. With this privacy policy, we would like to inform you about how your personal data is handled when you visit our website and about your rights.

I. Who are we and how can you contact us?

We,
smart5 services GmbH
Hünerbergweg 17
79539 Lörrach
T +49 7621 583 4030
E-Mail sales@smart5-group.com
Web: https://smart5-group.com

smart5 envitech GmbH
Hünerbergweg 17
79539 Lörrach
T +49 7621 583 4030
E-Mail sales@smart5-group.com
Web: https://smart5-group.com

Represented by:
Frank Lacroix-Schlegel, Jochen Holz

are responsible for protecting your personal data as the responsible body. If you have any questions about data processing, your rights or the privacy policy, please feel free to contact us directly. You can reach us at: sales@smart5-group.com

II. What data is processed when you visit our websites?
In the following, we will inform you about what data is collected when you visit our websites, for what purposes it is processed, on what legal basis the data processing takes place, what options you have to control the collection and processing of the data yourself and when the data is deleted.

A. Log-Files

Data collected:
When you visit our websites, the following data is automatically transmitted by your browser:
Your IP address
Websites that you access via our site
The pages that you click on and
The time of the page access
The name of your Internet service provider
Your browser type and version
The operating system of your device
The date and duration of the visit.
Purposes of data processing:
The temporary storage of this data is necessary to enable the website to be delivered to your computer and to ensure that the website functions properly. We also use this data to gain statistical information about how our websites are used. In addition, we collect the data in order to be able to track and prevent unauthorized access to the web server and the misuse of the websites and to secure our information technology systems.

Legal basis:
We temporarily store this data on the basis of legitimate interests (Art. 6 Para. 1 f GDPR). Our legitimate interest lies in achieving the purposes described above.
Storage period and control options:
The data is deleted when it is no longer necessary to achieve the purposes. Log files are deleted after 90 days at the latest.

B. General information about cookies and targeting technologies

Data collected:
When you visit our websites, so-called cookies are set. These are small text files that are stored on your device. Cookies usually contain a characteristic sequence of characters, the so-called cookieID, with which your browser can be identified when you visit our websites again.
In addition, we use so-called tags, which are small code elements that help us measure the behavior of our users and the success of advertising activities.
Depending on the type of cookies or tags, different data is collected and processed pseudonymously.
We use both our own cookies and cookies from other providers (third-party cookies). The third-party cookies are described in detail below in II. C.
Purposes of data processing:

Technically necessary cookies enable the technical functioning of the website. Some functions of our websites cannot be offered without the use of cookies.

Functionality cookies are used to make our websites more user-friendly and to ensure certain functionalities, e.g. the cross-page shopping cart display, in which you can see how many items are currently in your shopping cart and the storage of your login data so that you can access the data and settings you have already entered when you visit the page again.
Analysis cookies and tags enable us to generate overall statistics, e.g. on the number of visits, which areas of the websites are viewed most frequently and information about locations and the average length of time spent on the websites. This enables us to improve the quality of our websites and their content.
Advertising cookies and retargeting technologies enable us to provide you with offers and information tailored specifically to you. This enables us to make our websites more interesting for you and to address you on other websites with personalized, interest-based advertising.

Legal basis:
We use technically necessary cookies and functionality cookies based on legitimate interests (Art. 6 Para. 1 f GDPR). Our legitimate interest lies in ensuring that our websites function properly and are as easy to use as possible.
We use analysis cookies and advertising cookies as well as tags and retargeting technologies based on legitimate interests (Art. 6 Para. 1 f GDPR, Recital 47). Our legitimate interest lies in tailoring our websites to the interests of our customers.

Storage period and control options:
Some of the cookies we use are automatically deleted after you close your browser (so-called session cookies), others remain permanently on your device and enable us to recognize your browser (so-called persistent cookies).
You have full control over the use of cookies and can delete cookies in your browser, completely deactivate the storage of cookies or selectively accept certain cookies. Please use the help functions of your browser to find out how you can change these settings. This may limit the functionality of our websites.

C. Third-party cookie and tracking technologies used

Purposes of data processing:

We use Flurry to analyze the use of our mobile apps and to optimize them based on the analysis.

Legal basis:

We use Flurry on the basis of legitimate interests (Art. 6 Para. 1 f GDPR). Our legitimate interest lies in tailoring our mobile apps to the interests of our customers.

Storage period and control options:

Die Daten, die über Flurry erhoben werden, werden gespeichert und regelmäßig gelöscht.
Sie haben die Möglichkeit sowohl das Teilen von Analysedaten, wie auch das Teilen von Fehlerprotokollen (im Fall eines Programmabsturzes) abzustellen (opt-out): Auf iOS-Geräten in den Systemeinstellungen von lexoffice („Systemeinstellungen“ > „lexoffice“ > „Analysedaten teilen“ bzw. „Fehlerprotokolle senden“), auf Android-Geräten in den App-Einstellungen („Analysedaten teilen“)

You can also opt out of Flurry’s collection and processing of data. Flurry will then stop tracking data for the device identified by the specified MAC address and/or device ID. Analytics service tracking will be stopped in all applications within the Flurry network. Place of processing: United States
For more information about data protection at Flurry, see the Privacy Policy and Opt Out

Google:
Data collected:
Google Analytics: We use Google Analytics, a web analysis service provided by Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) on our websites. Google Analytics places cookies on your device that enable your use of our websites to be evaluated. To do this, Google collects data, for example, to uniquely identify your browser, information about when and how often you visited our websites, how long you stayed on our websites and how you interacted with our websites (you can find more information about this here).

We have added the code “get._anonymizeIP();” to Google Analytics. This causes Google to shorten your IP address and enable anonymized analysis. IP addresses are shortened within the EU or the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The data collected using cookies is generally transferred to a Google server in the USA and stored there. Compliance with data protection standards and your rights is ensured by Google certification under the EU-US Privacy Shield. Google transmits data to third parties if consent has been given to do so, this is required for legal reasons, or if third parties process the data on Google’s behalf.

Google Remarketing and Double Click: We use Google Remarketing and Google Double Click. This technology sets cookies that evaluate how you use our website and make it possible to recognize your browser when you visit websites that belong to the Google advertising network. For this purpose, the Google Analytics tracking code uses so-called DoubleClick cookies in addition to Google Analytics cookies. These collect data on which third-party websites in the Google Display Network you have visited and which advertisements you have clicked on. In addition, data from first-party cookies (e.g. Google Analytics cookies) and third-party cookies (e.g. Google cookie for display preferences) are linked. This enables us to evaluate the display of advertisements and your interaction with these advertisements.

Google AdWords Conversion Tracking: We use Google AdWords Conversion Tracking. This technology sets cookies when you interact with one of our advertisements, e.g. by clicking on it. Cookies are used to analyze what happens after you interact with an advertisement, e.g. whether you have purchased our product, viewed the ad from a mobile phone, downloaded our app or signed up for a newsletter.

Google Tag Manager: The Google Tag Manager helps us set and manage tags. Your data is not recorded by the service.
Google Fonts: Google Fonts help us to use an expanded selection of fonts on our website. Your data is not recorded by the service.
Google reCAPTCHA: We use Google’s reCAPTCHA service for some forms. Google collects certain data to determine whether a person or a machine is accessing our websites, e.g. your IP address, your screen and window resolution, the language set in your browser, the time zone you are in, the browser’s user agent and installed browser plug-ins. We have expanded the service to include the code “get._anonymizeIP();”. This causes Google to shorten your IP address. You can find more information about shortening the IP address in the explanations on Google Analytics above.

Google Maps: Tax consultants have the option of publishing their office data, including the address, in the tax consultant search. This allows clients who are looking for a tax consultant to see the addresses that have been released for publication. We use the Google Maps product from Google Inc. to display the tax consultant addresses. The data (street, house number, postcode, city) is transferred to Google. Your own location is shown in the results display in the tax consultant search. The location is determined by evaluating the address entered with us; in the case of a browser location, by evaluating the IP address or, on mobile devices, the GPS coordinates.

Purposes of data processing:
Google Remarketing and Double Click: We use this technology to present you with interest-based advertisements on other websites in the Google advertising network. The advertisements relate to content that you have previously viewed on our websites.
Google AdWords Conversion Tracking: We use this technology to improve our offers.
Google Tag Manager: We use this service to create, display and manage tags on our website.
Google Fonts: We use this service to be able to use an expanded selection of fonts on our website.
Google reCAPTCHA: We use this service to distinguish whether an entry in one of our web forms was made by a human or abusively automated/machine and thus to protect our technical systems.
Google Maps: We use Google Maps to enable a geolocated tax advisor search.
YouTube: We use YouTube to embed product videos on our websites.

Legal basis:
The Google products described are based on legitimate interests (Art. 6 Para. 1 f GDPR). Our legitimate interest lies in tailoring our websites to the interests of our customers.

We use Google reCAPTCHA on the basis of legitimate interests (Art. 6 Para. 1 f GDPR). Our legitimate interest lies in preventing the misuse of our forms and protecting our technical systems.

We only display the entry of a tax office in Google Maps if you, as a tax advisor, have consented to data processing.

Storage period and control options:
The data collected via the Google functions is stored and regularly deleted.
You can prevent the storage of cookies by setting your browser accordingly.
You can also prevent the collection and processing of data by Google by downloading and installing the browser add-on available under the following link.

Google Dynamic Remarketing and Double Click as well as Google AdWords Conversion Tracking: You can object to the storage of cookies and the associated data processing by deactivating personalized advertising via your advertising settings. You can deactivate the use of cookies by third parties via the Network Advertising Initiative deactivation website. Alternatively, you can deactivate DoubleClick cookies by installing a browser plug-in.
This may limit the functionality of our websites.

For more information, see the Google Privacy Policy.

Bing Ads / Bing Universal Event Tracking (UET):

Data collected:
Our website uses technologies from Bing Ads (https://secure.bingads.microsoft.com/) of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”).

If you have reached our website via a Bing Ads ad, Microsoft will place a cookie on your computer. Our website contains a Bing UET tag which, in conjunction with the cookie, stores non-personal data about the use of the website. This includes, among other things, the length of time spent on the website, which areas of the website were accessed and which ad users accessed the website via. Information about your identity is not recorded.

The information collected is transferred to Microsoft servers in the USA and stored there for a maximum of 180 days. You can prevent the collection of data generated by the cookie and related to your use of the website as well as the processing of this data by deactivating the setting of cookies. This may limit the functionality of the website.
In addition, Microsoft may be able to track your usage behavior across several of your electronic devices through so-called cross-device tracking and is therefore able to display personalized advertising on or in Microsoft websites and apps. You can deactivate this behavior at http://choice.microsoft.com/de-de/opt-out.

Purposes of data processing:

Universal Event Tracking allows us to track what happens after you click on an ad.

Legal basis for processing
We use Bing Ads on the basis of legitimate interests (Art. 6 Para. 1 f GDPR). Our legitimate interest lies in measuring and improving our online marketing activities.

Microsoft is committed to complying with the EU-US data protection agreement (“Privacy Shield”).

Storage period and control options:

For more information about Bing’s analytics services, please visit the Bing Ads website. For more information about data protection at Microsoft and Bing, please see the Microsoft privacy policy.

Social Plugins:
Data collected:
We use social plugins from the social networks
XING, which is operated by New Work SE, Dammtorstraße 30, 20354 Hamburg (“XING”).
LinkedIn, which is operated by LinkedIn Inc., 1000 W Maude Ave. Sunnyvale, CA, 94085-2810, USA (“LinkedIn”).

When you visit a website that contains such a plugin, your browser establishes a direct connection to the servers of the respective social network. Through this integration, the social network receives data about which website you have visited, even if you do not have a user profile or are not currently logged in. If you are logged in, Facebook can assign the visit to your Facebook account. If you interact with the plug-ins, the corresponding information is transmitted to the social network and stored there. Your IP address is stored in abbreviated form. The data collected is transmitted from your browser directly to a server of the social network in the USA and stored there.

The data collected is anonymous to us and therefore does not allow us to draw any conclusions about the purposes of data processing:

The social plugins allow you to share website content on social networks.

Legal basis:
We use social plugins on the basis of legitimate interests (Art. 6 Para. 1 f GDPR). Our legitimate interest lies in tailoring our websites to the interests of our customers. Twitter has committed to complying with the EU-US data protection agreement (“Privacy Shield”).
Storage period and control options:

You can prevent the collection and processing of data by social networks by selecting the appropriate settings in your browser.
If you do not want social networks to assign the data collected via our websites directly to your user profile, you must log out before visiting our websites.

Further information can be found in the privacy policies of LinkedIn and XING.

LinkedIn Insights Tag and Conversion Tracking:
Data collected:
We use the LinkedIn Insight Tag for this website. The LinkedIn Insight Tag creates a LinkedIn “browser cookie” which collects the following data:
IP address,
time stamp,
page activity,
demographic data from LinkedIn if the user is an active LinkedIn member.
With the help of this technology, we can create reports on the performance of our advertisements and information on website interaction. For this purpose, the LinkedIn Insight Tag is integrated into this website, which establishes a connection to the LinkedIn server if you visit this website and are logged into your LinkedIn account at the same time.

Purposes of data processing:
We process your data to evaluate campaigns and collect information about website visitors who may have reached us through our campaigns on LinkedIn.

Legal basis:
We process your data because you have consented to this or because we have a legitimate interest in processing the data, Art. 6 Paragraph 1 Clause 1 Letters a and f of the EU GDPR. Our legitimate interest lies in determining the reach of our advertisements and analyzing user behavior on our websites.

Storage period and control options:
We store your data as long as we need it for the respective purpose (campaign evaluation) or as long as you have not objected to the storage of your data or revoked your consent.

The data collected is encrypted. You can find more information here. Here you can find the LinkedIn privacy policy and the LinkedIn opt-out.
III. What data is processed when you contact us, order a newsletter, chat with us, open a user account and purchase online products and use services?

In the following we will inform you about which data is collected and processed when you contact us, order a newsletter, chat with us and for what purposes and by which recipients this data is processed, on what legal basis the data processing takes place and when the data is deleted.

A. Contacting us
Data collected:
We collect and process the data you provide, such as your contact details, your name and your request, when you contact us via a contact form or by email. All data that you send to us is transmitted in encrypted form between your browser and our server.

Purposes of data processing:
The data processing is carried out by our customer service or by service providers commissioned by us exclusively on the basis of and for the purpose of processing your request.

Legal basis:
We process your data to carry out pre-contractual and contractual measures that are carried out at your request (Art. 6 Para. 1 b GDPR).

Storage period:
We store your data for as long as we need it for the specific processing purpose, for warranty purposes or to comply with statutory retention periods.

IV. What rights do you have and how can you exercise them?

A. Revocation of consent
You can revoke any consent you have given to the processing of your personal data at any time with effect for the future. Please note that the revocation has no effect on the legality of the data processing to date and that it does not extend to data processing for which there is a legal basis for permission and which may therefore be processed without your consent.

B. Further rights of data subjects
In addition, according to Articles 15 to 21 and 77 of the EU General Data Protection Regulation (GDPR), you are entitled to the following rights of data subjects if the legal requirements are met:

Information:
You can request at any time that we provide you with information about which of your personal data we process and how, and provide you with a copy of the personal data stored by you, Art. 15 GDPR.

Correction:
You can request the correction of incorrect personal data and the completion of incomplete personal data, Art. 16 GDPR.

Deletion:
To delete your personal data: Please note that data that we need to carry out and process contracts and to assert, exercise and defend legal claims as well as data for which there are statutory, regulatory or contractual retention obligations are excluded from deletion, Art. 17 GDPR.

Restriction of processing:
You can request restriction of processing under certain circumstances, e.g. if you believe that your data is incorrect, if the processing is unlawful or if you have objected to the data processing. This means that your data may only be processed to a very limited extent without your consent, e.g. to assert, exercise and defend legal claims or to protect the rights of other natural and legal persons, Art. 18 GDPR.

Objection to data processing:
You have the option to object to data processing for direct marketing purposes at any time. In addition, if there are special reasons, you can object to data processing based on a legitimate interest at any time, Art. 21 GDPR.

Data portability:
You have the right to receive the data that you have provided to us and that we process on the basis of your consent or to fulfill the contract in a common, machine-readable format and, to the extent technically feasible, to request that this data be transmitted directly to third parties, Art. 20 GDPR.

D. Contact options
You can exercise your rights via the following contact options:
smart5 services GmbH
Hünerbergweg 17
79539 Lörrach
T +49 7621 583 4030
E-mail sales@smart5-group.com
Web: https://smart5-group.com

smart5 envitech GmbH
Hünerbergweg 17
79539 Lörrach
T +49 7621 583 4030
E-Mail sales@smart5-group.com
Web: https://smart5-group.com

You can revoke your consent to data processing through cookies and tracking technologies by making the appropriate settings in your browser or using the opt-out options described in detail under II. C.

You can revoke your consent to receive the newsletter at any time by clicking on the corresponding link in each newsletter.
E. Right to lodge a complaint with a supervisory authority

Wenn Sie z.B. der Ansicht sind, dass unsere Datenverarbeitung rechtswidrig ist oder wir die oben beschriebenen Rechte nicht in dem notwendigen Umfang gewährt haben, haben Sie das Recht, bei der zuständigen Datenschutzaufsichtsbehörde Beschwerde einzulegen.
Stand: 27.04.2021