Privacy Policy
Privacy Policy and Cookie Policy
We appreciate your interest in our online shop. The protection of your privacy is very important to us. Below, we provide you with comprehensive information about how we handle your data.
1. Responsibility
Dirk Lynen
Colynshofstr. 46
52074 Aachen
0241-559693-0
info@cad-software.eu
2. Access Data and Hosting
You can visit our websites without providing any personal information. Each time you access a website, the web server automatically stores only a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of access, data transferred, and the requesting provider (access data) and documents the access.
This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. According to Article 6 (1) sentence 1 lit. f GDPR, this serves to protect our legitimate interests, which outweigh other interests in the context of a balancing of interests, in the correct presentation of our offer. All access data is deleted no later than seven days after the end of your site visit.
Hosting Services by a Third-Party Provider
As part of processing on our behalf, a third-party provider provides us with hosting and website display services. This serves to protect our legitimate interests, which outweigh other interests in the context of a balancing of interests, in the correct presentation of our offer. All data collected during the use of this website or in forms provided in the online shop, as described below, is processed on its servers. Processing on other servers only takes place within the scope explained here.
This service provider is located in a country of the European Union or the European Economic Area.
3. Data Collection and Use for Contract Performance, Contact, and Customer Account Opening
We collect personal data when you voluntarily provide it to us in connection with your order, when you contact us (e.g., via contact form or email). Mandatory fields are marked as such because we require the data for contract performance or to process your contact in these cases, and you cannot complete the order or send the contact without providing this information. Which data is collected is evident from the respective input forms. We use the data you provide according to Article 6 (1) sentence 1 lit. b GDPR for contract performance and processing your inquiries.
Insofar as you have given your consent pursuant to Article 6 (1) sentence 1 lit. a GDPR by deciding to open a customer account, we use your data for the purpose of opening the customer account.
After complete contract performance or deletion of your customer account, your data will be restricted from further processing and deleted after expiration of tax and commercial retention periods, unless you have explicitly consented to further use of your data or we reserve the right to further data use that is legally permitted and about which we inform you in this policy. Deletion of your customer account is possible at any time and can be done either by sending a message to the contact method described below or via a function provided in the customer account.
SSL or TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the address bar of your browser changes from "http://" to "https://" and by the lock icon in your browser bar.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
4. Data Transfer
To fulfill the contract according to Article 6 (1) sentence 1 lit. b GDPR, we pass your data on to the shipping company commissioned with delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the ordering process, we pass on the payment data collected for this purpose to the credit institution commissioned with payment and, if applicable, payment service providers commissioned by us, or to the selected payment service. In part, the selected payment service providers also collect this data themselves, insofar as you create an account with them. In this case, you must log in with your access data to the payment service provider in the ordering process. The privacy policy of the respective payment service provider applies accordingly.
Data Transfer to Shipping Service Providers
Insofar as you have given us your explicit consent during or after your order, we transfer your email address and telephone number to the selected shipping service provider according to Article 6 (1) sentence 1 lit. a GDPR so that they can contact you before delivery for the purpose of delivery notification or coordination.
The consent can be revoked at any time by sending a message to the contact method described below or directly to the shipping service provider at the contact address listed below. After revocation, we delete the data you provided for this purpose, unless you have explicitly consented to further use of your data or we reserve the right to further data use that is legally permitted and about which we inform you in this policy.
DHL Paket GmbH
Strässchensweg 10
53113 Bonn
5. Email Newsletter and Direct Mail Advertising
Email Advertising Without Newsletter Registration and Your Right to Object
If we receive your email address in connection with the sale of goods or services and you have not objected to it, we reserve the right to regularly send you offers for similar products to those you have already purchased from our assortment by email, based on Section 7 (3) UWG. This serves to protect our legitimate interests, which outweigh other interests in the context of a balancing of interests, in the advertising approach to our customers.
You can object to this use of your email address at any time by sending a message to the contact method described below or via a link provided for this purpose in the advertising email, without incurring any costs other than the transmission costs according to the basic tariffs.
Direct Mail Advertising and Your Right to Object
Furthermore, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, such as sending interesting offers and information about our products by mail. This serves to protect our legitimate interests, which outweigh other interests in the context of a balancing of interests, in the advertising approach to our customers according to Article 6 (1) sentence 1 lit. f GDPR.
6. Integration of the Trusted Shops Trustbadge
To display our Trusted Shops quality seal and the collected reviews as well as to offer Trusted Shops products to customers after an order, the Trusted Shops Trustbadge is integrated on this website.
This serves to protect our legitimate interests, which outweigh other interests in the context of a balancing of interests, in optimal marketing by enabling secure shopping according to Article 6 (1) sentence 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is provided as part of contract processing by a CDN provider (Content Delivery Network). Trusted Shops GmbH also uses service providers in the USA. An appropriate level of data protection is ensured. Further information on data protection by Trusted Shops GmbH can be found here: https://www.trustedshops.de/impressum/#datenschutz
When the Trustbadge is called up, the web server automatically stores a so-called server log file, which also contains your IP address, date and time of access, data transferred, and the requesting provider (access data) and documents the access. Individual access data is stored in a security database for the analysis of security incidents. The log files are automatically deleted no later than 90 days after creation.
Further personal data is only transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or are already registered to use them. The contractual agreement between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data. Whether you as a buyer are already registered for product use is automatically checked using a neutral parameter, the email address hashed by a cryptological one-way function. The email address is converted to this hash value, which cannot be decrypted by Trusted Shops, before transmission. After checking for a match, the parameter is automatically deleted.
This is necessary to fulfill our and Trusted Shops' legitimate interests, which outweigh other interests, in providing buyer protection coupled to the respective order and transactional rating services according to Article 6 (1) sentence 1 lit. f GDPR. Further details, including on objection, can be found in the Trusted Shops privacy policy linked above and in the Trustbadge.
7. Cookies and Web Analytics
To make your visit to our website attractive and to enable the use of certain functions, to display suitable products, or for market research, we use so-called cookies on various pages, insofar as you have given your consent according to Article 6 (1) sentence 1 lit. a GDPR.
Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of your browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). You can find the duration of storage in the overview in your web browser's cookie settings. You can set your browser to notify you when cookies are set and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or generally. If you do not accept cookies, the functionality of our website may be limited. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains to you how you can change your cookie settings. You can find these for the respective browsers under the following links:
Microsoft Edge™: https://support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64dd
Safari™: https://support.apple.com/en-us/105082
Chrome™: https://support.google.com/chrome/answer/95647?hl=en&co=GENIE.Platform%3DDesktop
Firefox™: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Opera™: https://help.opera.com/en/latest/security-and-privacy/#cookies
Furthermore, you can revoke your consent at any time by sending a message to the contact method described in the privacy policy.
Usercentrics Consent Management Platform
On our website, we use the Usercentrics Consent Management Platform (Usercentrics) to inform you about the technologies we use on our website and to obtain, manage, and document your consent for the processing of your personal data by these technologies. According to Article 6 (1) sentence 1 lit. c GDPR, this is necessary to fulfill our legal obligation according to Article 7 (1) GDPR to be able to prove your consent for the processing of your personal data, which we are subject to. The consent management service Usercentrics is an offer of Usercentrics GmbH, Rosental 4, 80331 Munich, which processes your data on our behalf. When you visit our website, the web server of Usercentrics stores a so-called server log file, which also contains your anonymized IP address, date and time of your visit, device and browser information, as well as information about your consent behavior. Your data will be deleted after three years, unless you have explicitly consented to further use of your data according to Article 6 (1) sentence 1 lit. a GDPR or we reserve the right to further data use that is legally permitted and about which we inform you in this policy.
Use of Google (Universal) Analytics for Web Analysis
Insofar as you have given your consent according to Article 6 (1) sentence 1 lit. a GDPR, this website uses Google (Universal) Analytics for the purpose of website analysis. The web analytics service is an offer of Google Ireland Limited, a company registered and operating under Irish law with its seat at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.com). Google (Universal) Analytics uses methods that allow an analysis of your use of the website, such as cookies. The automatically collected information about your use of this website is generally transmitted to a Google server in the USA and stored there. By activating IP anonymization on this website, your IP address is shortened before transmission within the member states of the European Union or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser in the context of Google Analytics is generally not merged with other Google data. After the purpose expires and Google Analytics is discontinued by us, the data collected in this connection will be deleted. Insofar as information is transmitted to Google servers in the USA and stored there, the data transfer is based on the adequacy decision of the European Commission of July 10, 2023 on the EU-US Data Privacy Framework. Google LLC is certified under this framework, which ensures an appropriate level of data protection according to Article 45 GDPR.
You can revoke your consent at any time with effect for the future by downloading and installing the browser plugin available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=en
This prevents the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google.
Alternatively to the browser plugin, you can click this link to prevent future collection by Google Analytics on this website. An opt-out cookie will be stored on your device. If you delete your cookies, you will be asked to provide your consent again.
8. Further Technologies
On our website, we may use other technologies (e.g., cookies, web analytics tools, online marketing tools, social plugins) that are not individually listed within this privacy policy. Further information on these technologies and the respective legal basis can be found on the platform of our consent management service Usercentrics, which we have integrated on our website. You can access the Usercentrics platform by clicking the fingerprint button in the lower left corner of the page.
9. Online Marketing
Google AdWords Remarketing
We advertise for this website through Google Ads in Google search results and on third-party websites. Insofar as you have given us your consent according to Article 6 (1) sentence 1 lit. a GDPR, the so-called remarketing cookie from Google is set when you visit our website, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. After the purpose expires and Google Ads Remarketing is discontinued by us, the data collected in this connection will be deleted.
Further data processing only occurs if you have consented to Google that your web and app browser history be linked to your Google account and information from your Google account be used to personalize ads you see on the web. If you are logged into Google during your visit to our website in this case, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to form audiences.
Google Ads is an offer of Google Ireland Limited, a company registered and operating under Irish law with its seat at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.com). Insofar as information is transmitted to Google servers in the USA and stored there, this occurs on the basis of appropriate safeguards according to Article 46 GDPR. The standard contractual clauses of the European Commission apply. Further information is available under [https://ec.europa.eu/info/law/law-topic/data-protection_en].
You can revoke your consent at any time with effect for the future by deactivating the remarketing cookie via this link https://adssettings.google.com/authenticated?hl=en. Additionally, you can inform yourself at the Digital Advertising Alliance https://youradchoices.com/ about the setting of cookies and make settings accordingly.
Google Fonts
The script code Google Fonts is embedded on this website. Google Fonts is an offer of Google Ireland Limited, a company registered and operating under Irish law with its seat at Gordon House, Barrow Street, Dublin 4, Ireland. (http://www.google.de). This serves to protect our legitimate interests, which outweigh other interests in the context of a balancing of interests, in uniform presentation of content on our website according to Article 6 (1) lit. f) GDPR. In this context, a connection is established between the browser you use and the servers of Google. Through this, Google learns that our website was accessed via your IP address.
Insofar as information is transferred to and stored on servers of Google LLC in the USA, this occurs on the basis of:
- The EU-US Data Privacy Framework, which the European Commission adopted on July 10, 2023, OR
- Standard contractual clauses provided by the European Commission.
The protection of personal data in the USA differs from the level of protection in the European Union. Less stringent protection standards may apply to non-US citizens. The European Commission adopted the EU-US Data Privacy Framework as a new framework for data transfers on July 10, 2023. Nevertheless, when data transfers to the USA take place, appropriate protective measures, such as standard contractual clauses, should continue to be observed. Further information can be obtained under https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en?prefLang=en.
10. Social Media
Our online presence on Meta (Facebook/Instagram), X (Twitter), YouTube.
Our presence on social networks and platforms serves better and more active communication with our customers and interested parties. We inform them about our products and ongoing special promotions there.
When you visit our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. Using pseudonyms, so-called usage profiles are created from this data. These can be used to display advertising, for example, within and outside the platforms, which is presumably of interest to you. For this purpose, cookies are generally used on your device. These cookies store visitor behavior and user interests. This serves according to Article 6 (1) lit. f GDPR to protect our legitimate interests, which outweigh other interests in the context of a balancing of interests, in the optimized presentation of our offer and effective communication with customers and interested parties. If the respective social media platform operators ask you for consent for data processing, such as through a checkbox, the legal basis for data processing is Article 6 (1) lit. a GDPR. Insofar as the aforementioned social media platforms have their principal place of business in the USA, the following applies: The transmission of personal data to the USA occurs on the basis of appropriate safeguards according to Article 46 GDPR. The platform operator has committed to comply with the EU-US Data Privacy Framework or other safeguards apply (e.g., standard contractual clauses). A current certificate for the respective company can be viewed on the website of the U.S. Department of Commerce: https://www.dataprivacyframework.gov/list. Please note that data transmission to the USA is associated with risks arising from the legislation there (in particular, access rights of US authorities). You have the right to contact our data protection officer or file a complaint with the competent data protection authority if you believe your rights have been violated.
The detailed information on the processing and use of data by the providers on their pages, as well as a contact option and your rights and settings options to protect your privacy, in particular opt-out options, can be found in the privacy notices of the providers linked below. If you need further assistance regarding this, please feel free to contact us.
Meta Platforms (Facebook, Instagram)
We use services from Meta Platforms Ireland Ltd., for example, to display content or to analyze user behavior. In this process, personal data (such as IP address, interactions, device information) may be transmitted to Meta in the USA and processed there.
Data processing occurs on the basis of the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework. Meta is certified accordingly.
You have the option to object to the use of your data for personalized advertising. Meta provides an opt-out form within the app under "Settings - Privacy Policy - Right to Object".
Alternatively, you can purchase a paid subscription to avoid data processing for advertising purposes.
Google LLC
Our website uses services from Google (such as Google Analytics, Google Fonts, YouTube). In this process, personal data may be transferred to the USA.
Google is certified under the EU-U.S. Data Privacy Framework.
You can object to personalized advertising by Google under:
https://adssettings.google.com
X (formerly Twitter)
We use functions and content from the X service (formerly Twitter), offered by Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. When visiting our website, personal data (such as IP address, browser data, interactions) may be transmitted to X and processed there.
Data processing occurs on the basis of your consent according to Article 6 (1) lit. a GDPR, if you have consented to this via our cookie banner.
X uses the transmitted data, among other things, to display personalized content and advertising as well as to analyze user behavior.
You can revoke your consent at any time and object to processing.
An opt-out option is available from X under:
https://twitter.com/settings/account/personalization
Further information on data processing by X can be found in X's privacy policy under:
https://twitter.com/en/privacy
11. Sending Review Reminders by Email
Insofar as you have given us your explicit consent during or after your order according to Article 6 (1) sentence 1 lit. a GDPR, we use your email address to remind you to submit a review of your order via the rating system we use.
This consent can be revoked at any time by sending a message to the contact method described below.
12. Review Reminder by Trusted Shops
Insofar as you have given us your explicit consent during or after your order according to Article 6 (1) sentence 1 lit. a GDPR, we transmit your email address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de) so that they can send you a review reminder by email.
This consent can be revoked at any time by sending a message to the contact method described below or directly to Trusted Shops.
13. Contact Information and Your Rights
As a data subject, you have the following rights:
- # Pursuant to Article 15 GDPR, the right to request information to the extent specified therein concerning your personal data processed by us;
- # Pursuant to Article 16 GDPR, the right to promptly request the correction of inaccurate or completion of your personal data stored with us;
- # Pursuant to Article 17 GDPR, the right to request the deletion of your personal data stored with us, insofar as further processing is not
- necessary for the exercise of the right of freedom of expression and information;
- necessary for compliance with a legal obligation;
- necessary for reasons of public interest or
- necessary for the establishment, exercise, or defense of legal claims;
- # Pursuant to Article 18 GDPR, the right to request restriction of processing of your personal data, insofar as
- the accuracy of the data is disputed by you;
- the processing is unlawful, but you refuse deletion of the data;
- we no longer need the data, but you need it for the establishment, exercise, or defense of legal claims, or
- you have filed an objection to processing according to Article 21 GDPR;
- # Pursuant to Article 20 GDPR, the right to receive your personal data that you have provided to us in a structured, common, and machine-readable format or to request transmission to another controller;
- # Pursuant to Article 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can do this with the supervisory authority of your usual place of residence or work or our company's place of business.
- # Pursuant to Article 7 (3) GDPR, the right to revoke your consent given once at any time to us. This means that we will not continue the data processing based on this consent for the future.
If you have questions about the collection, processing, or use of your personal data, or if you need information, correction, blocking, or deletion of data, as well as revocation of granted consents or objection to specific data use, please contact the controller specified above under Section 1 directly.
14. Right to Object
Insofar as we process personal data to protect our legitimate interests, which outweigh other interests in the context of a balancing of interests, as explained above, you can object to this processing with effect for the future. If processing is carried out for the purposes of direct marketing, you can exercise this right at any time as described above. Insofar as processing is carried out for other purposes, you only have a right to object if there are reasons arising from your particular situation. After exercising your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate reasons for processing that outweigh your interests, rights, and freedoms, or if processing is necessary for the establishment, exercise, or defense of legal claims. This does not apply if processing is carried out for the purposes of direct marketing. In that case, we will no longer process your personal data for this purpose.