Privacy Policy


The protection of your personal data during the collection, processing, and use on the occasion of your visit to our website is an important concern for us. Your data will be protected within the framework of the statutory provisions.

Please take a moment to read the following information. This will tell you how we handle your personal data, how and for what purpose this data is used, to whom we pass this data, and how we protect your personal data.

Your personal rights are of the highest priority to us and we make every effort to protect and guarantee these rights. In order to comply with our obligations under data protection law, we hereby provide you with the necessary information in accordance with Article 13 of the European General Data Protection Regulation (GDPR):

The controller for the processing of your personal data within the meaning of the General Data Protection Regulation is:

novaCapta GmbH
Im Mediapark 5c
50670 Cologne
Telephone number: +49 (0)221 58919 -343
E-mail: [email protected]

Collection and processing of data

Every access to our website and every retrieval of a file stored on the website is logged. The storage serves internal system-related and statistical purposes.

The following data is logged

  • the IP address of the calling computer (for a maximum of 7 days),
  • the operating system of the calling computer
  • the browser version of the calling computer,
  • the name of the retrieved file or page,
  • the date and time of the retrieval,
  • the amount of data transferred and
  • the referring URL

In addition, the IP addresses of the requesting computer are logged. However, the responsible party does not draw any conclusions about a person. This data is only required to display the content of our website correctly, to optimize the content for you on a permanent basis and to support prosecutions in the event of hacker attacks.

Insofar as personal data (such as name, address, e-mail address, etc.) is collected on this website, this is done in voluntary agreement with you and in your knowledge. The personal data is collected and processed by us in accordance with the provisions of the German Telemedia Act (TMG), the EU General Data Protection Regulation (DSGVO), and the German Federal Data Protection Act (BDSG). You may revoke your consent at any time.

Use and disclosure of personal data

Insofar as you have provided us with personal data, we will only use this in accordance with European and German data protection regulations to answer your enquiries, to establish, process and terminate contracts concluded with you, for technical administration, and possibly to advertise our products and services if we have your consent or if this is permitted by law.

Your personal data will only be passed on to third parties or otherwise transferred if this is necessary for the purpose of fulfilling the contract – in particular the transfer of order or contract data when involving service providers and/or suppliers, etc., if this is necessary for billing purposes or if you have given your prior consent. You have the right to revoke your consent at any time with effect for the future.

Contact form

We offer a contact form on our website to get in touch with us. In order to process your request, we need at least the following information from you:

  • Name
  • E-mail address

We need this information to process your request, to address you correctly and to send you a reply.

Enquiries received via the contact form on our website are usually stored in our CRM system. The CRM system is regularly checked to see whether data can be deleted. If data is no longer required in the context of a customer or interested party relationship or if a conflicting interest on the part of the customer prevails, we will delete the data in question if there are no legal retention obligations that contradict this.

All your personal data and other information that you provide to us via the contact form set up on our website will only be collected and processed for the purpose of processing and responding to your enquiries on the basis of Art. 6 (1) DSGVO. If this information is not provided, it is unfortunately not possible for us to contact you and process your request. No automated decision-making will be carried out. You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing carried out until the revocation remains unaffected.

If your enquiry concerns an offer or the establishment of or questions in the context of a business relationship, the legal basis for this data processing is Article 6 (1) of the DSGVO, and we process your data for the performance of a contract to which you are a party, or for the implementation of pre-contractual measures that take place in response to your enquiry. In addition, you have the option of leaving us your telephone number for faster contact. If you provide this, it will also be stored in our CRM system together with your enquiry. The provision of the telephone number is voluntary.

The legal basis for this is Article 6 (1) of the DSGVO, your consent, which you can revoke at any time (see below). In the event of your revocation, we will delete your telephone number from our CRM accordingly.

We use HubSpot as a service provider, the transmitted data is processed by HubSpot in the USA. To ensure the security of your data, we have concluded an order processing agreement with HubSpot accordingly, which also includes the EU standard contractual clauses.

All information about the service provider we use for contact forms and newsletters can be found with the provider at:

HubSpot Privacy Policy: http://legal.hubspot.com/de/privacy-policy
HubSpot data processing agreement: http://legal.hubspot.com/de/dpa
HubSpot GTC: https://legal.hubspot.com/terms-of-service

Data subject rights

In accordance with Art. 15 DSGVO, you are entitled to information about the processing of your personal data. In addition, you are free to assert your rights to rectification, erasure or, if erasure is not possible, to restriction of processing and to data portability in accordance with Articles 16-18, 20 DSGVO. Should you wish to exercise this right, please contact our data protection officer.

Furthermore, you have the right to complain to the competent supervisory authority at any time. If you are of the opinion that your personal data is not being processed in compliance with data protection laws, we would kindly ask you to contact our data protection officer.

You also have the right to object to the processing of your personal data at any time.

Newsletter

In addition, you can subscribe to our newsletter via our website. To do this, we need your e-mail address. To ensure that a third party has not registered your e-mail address for our newsletter, we work with the double opt-in procedure. For this purpose, we send an e-mail to the registered address containing a unique link upon registration. Only when this link is clicked will the e-mail address be activated for sending newsletters. Otherwise, the e-mail address will be deleted from our system after 14 days.

In addition to the email address, the time of registration and confirmation as well as the IP address are stored as proof of consent. Due to our interest in defending against unjustified claims, this data will continue to be stored exclusively for this purpose for up to three years after unsubscribing. We reserve the right to store e-mail addresses in a blacklist for the purpose of permanently observing advertising blacklist entries in the event of corresponding requests.

We use HubSpot as a service provider for the newsletter and contact form, the transmitted data is processed by HubSpot in the USA. To ensure the security of your data, we have concluded an order processing agreement with HubSpot accordingly, which also includes the EU standard contractual clauses.

In the case of newsletter registration and the sending of newsletters, the legal basis is Article 6 (1) of the DSGVO, i.e. your consent, which is documented with registration and confirmation by using the double opt-in link. If you do not provide your consent, we will unfortunately not be able to provide you with our newsletter, contact you and process your request.

You can unsubscribe from our newsletter at any time, you will also find a corresponding link at the end of each newsletter sent.

The newsletters contain tracking pixels with which we measure the opening rate. When the newsletter is opened, a file is retrieved from the server of our service provider. This retrieval transfers the IP address, time of retrieval and technical information to the system used. The performance measurement cannot be revoked separately. If you wish to object to this evaluation, you must unfortunately cancel your newsletter subscription with us completely.

All information about the service provider we use for contact forms and newsletters can be found at the provider's website:

HubSpot privacy policy: http://legal.hubspot.com/de/privacy-policyHubSpot data processing agreement: http://legal.hubspot.com/de/dpa
HubSpot GTC: https://legal.hubspot.com/terms-of-service

Protection of stored data

We use technical and organizational security measures to protect the personal data you have made available to us from manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved and adapted according to the state of the art. It cannot be ruled out that data transmitted by you without encryption can be viewed by third parties during transmission. We would like to point out that with regard to data transmission via the Internet (e.g. communication by e-mail), no conclusive guarantee can be given for secure transmission. Sensitive data should therefore either not be transmitted at all or only via a secure connection (SSL) over the Internet.

Protection of minors

Consent to the processing of personal data can only be given by a person of legal age. For information society services, the consent of a child is permissible from the age of sixteen according to Art. 8 GDPR.

Cookies

We use technical cookies on our website to make the website more user-friendly. In order to use the full functionality of our website, it is therefore technically necessary to allow certain cookies.

The purpose of using such cookies is to enable you to use the website in a simplified and more user-friendly manner. It is therefore necessary for the browser to be able to identify you even after you have changed pages within our domain. The data stored and transmitted in this process are language settings and log-in data. Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.

In addition to the use of technically necessary cookies, analytics and marketing cookies are used on this website. However, these only collect and store data in pseudonymous form. They are not used to identify you personally and are not merged with data about the bearer of the pseudonym. We use this information to determine the attractiveness of our website and to continuously improve its content.

The legal basis for the use of tracking cookies is the consent given by you in accordance with Art. 6 (1) DSGVO. You can adjust the cookie settings at any time and have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until the revocation remains unaffected.

Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. You can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter "Google") which uses cookies. Cookies are text files that are stored on your computer and enable an analysis of your use of the website. Cookies generally transmit the information generated about your use of this website to a Google server in the USA and are stored there. However, as this website uses IP anonymization, your IP address will be truncated by Google beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google uses this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide other services to the website operator relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

The collection of data within the scope of this service will only take place with your express consent. The legal basis for this is your consent in accordance with Art. 6 (1) DSGVO. You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until the revocation remains unaffected.

The purpose of the collection is to evaluate the use of our website. Furthermore, the use of Google Analytics enables us to create reports on website activities and thus improve our internet presence In addition to us, Google is the recipient of the data. The data is deleted as soon as it is no longer required for our recording purposes. You can stop the collection of your data by Google Analytics at any time, even after giving your consent.

Use of Google Maps

Our website uses Google Maps API (Application Programming Interface) for the visual display of geo-graphical information (maps). Google Maps is provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter: "Google"). This enables us to make it easier for you to find us or to point out specific locations.

Google should therefore also be named as the recipient of the data. When Google Maps is used, information about the use of our website, including your IP address, is transmitted to a Google server in the USA and stored there. This data processing is based on Art. 6 (1) DSGVO, as the IP address is needed to deliver the content to you.

You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until the revocation remains unaffected. In this processing, the cooperation with Google takes place on the basis of a joint responsibility agreement pursuant to Art. 26 DSGVO. This can be accessed at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/.

The transfer of data to the USA is associated with risks under data protection law. If you do not wish the data to be transferred, you can deactivate your consent in the cookie settings. Please note however, that you will not be able to use the map display in this case.

More information on the collection and processing of your data by Google and your rights as a data subject in this regard can be found in Google's data protection declaration at http://www.google.com/policies/privacy/?hl=de and in the additional terms of use for Google Maps and Google Earth at https://www.google.com/intl/de_de/help/terms_maps.html.   

Use of Google Tag Manager

Our website uses the Google Tag Manager, a service provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter "Google"). This allows us to manage website tags. The Google Tag Manager tool itself is a cookie-less domain and does not collect any personal data. The Google Tag Manager triggers other tags which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

For more information about the collection and processing of your data by Google and your rights as a data subject in this regard, please refer to Google's privacy policy at: https://policies.google.com/privacy?hl=de. It is possible that personal data may be transferred to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in the course of using this Google service.

Google Ads

This website uses Google Ads, a service provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter "Google").

We use the conversion tracking function. Google Ads sets cookies on your computer if you have reached our website via an advertisement placed by Google. The data collected by the cookie is not user-related and therefore does not serve to identify you personally. The cookies lose their validity after 30 days. The data is collected for the purpose of creating conversion statistics for Google Ads customers. We only receive information about the total number of users who clicked on our ad and were subsequently redirected to a website tagged with a conversion tracking tag.   

The purpose of the collection is to provide you with targeted advertising. The legal basis for this is your consent in accordance with Art. 6 (1) DSGVO. You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until the revocation remains unaffected.

In addition to us, Google is to be named as the recipient of the data. The data will be deleted as soon as it is no longer required for our recording purposes. Consent is furthermore required by Google in accordance with their policy: https://www.google.com/about/company/user-consent-policy.html.

For more information about the collection and processing of your data by Google, as well as your data subject rights in this regard, please refer to Google's privacy policy at: http://www.google.com/policies/privacy/?hl=de.

Data processing by HubSpot

We use HubSpot, a platform for inbound marketing and sales, on the basis of your consent (regarding the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) DSGVO) HubSpot uses cookies. The information generated by this usually transmitted to a HubSpot server in the USA and stored there.

HubSpot will use this information on our behalf to evaluate the use of our online offers, to compile reports on the activities within this online offer, and to provide us with further services related to the use of this online offer and the internet. In doing so, pseudonymous user profiles can be created from the processed data. We only use HubSpot with activated IP anonymization. This means that the IP address of the user is shortened by HubSpot within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a HubSpot server in the USA and shortened there. The IP address transmitted by the user's browser is not merged with other data from HubSpot. Users can prevent the storage of cookies by setting their browser software accordingly. You can find out more information about HubSpot's use of data, setting and objection options on HubSpot's websites: https://legal.hubspot.com/privacy-policy.

Embedded YouTube videos

The YouTube.de/YouTube.com plug-ins that we use on our website are operated by YouTube (LLC, 901 Cherry Ave, San Bruno, CA 94066 USA), represented by Google Inc. If the plug-ins are called up on our website, a connection to the YouTube servers is established. This results in the transmission of information about which of our websites you have visited to the YouTube server. If you are logged in as a member of YouTube, it is possible for YouTube to assign this information (videos viewed and comments) to your personal user account. You can avoid the collection of your data by logging out. YouTube's privacy policy can be accessed at: https://www.google.de/intl/de/policies/privacy/.

It is possible that personal data may be transferred to the USA when using this Google service.

Social Media

We would like to get in touch with you and other interested parties, customers and users. We use various social networks for this purpose. You can find out which individual social networks we use in the following section.

However, we would like to point out that we generally have no influence on what data is collected. As a rule, this is data that is used for market research and advertising purposes. This usually happens through the creation of user profiles and the interests determined from them. This makes it possible to offer you tailor-made advertising. Therefore, cookies may also be set on your computer when you use social networks.

Furthermore, we would like to point out that your data may also be processed outside the European Union and that you therefore run the risk of not being able to properly enforce your rights.

In principle, we would like to provide you with information or give you the opportunity to share such information in the simplest and quickest way possible. Therefore, unless you have consented to data processing on the respective platform, the legal basis is our legitimate interest pursuant to Art. 6 (1) DSGVO. You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until the revocation remains unaffected.

Facebook

On our website we use a link to our presence on the social network Facebook (Facebook fan page) to interact with Facebook users who visit the fan page. For this Facebook fan page, we are affiliated with Facebook Ireland Ltd. (4 Grand Canal Square, Dublin 2, Ireland; hereinafter: "Facebook") as joint controller pursuant to Article 26 GDPR. The joint responsibility agreement can be found at the following link: https://www.facebook.com/legal/terms/page_controller_addendum

We hereby inform you about the type and scope of personal data processed when using our Facebook fan page. With the processing of your personal data, we pursue the purpose of providing visitors with a contemporary information platform as well as an interaction opportunity on Facebook. The basis of the processing is therefore our legitimate interest pursuant to Art. 6 (1) DSGVO. In doing so, the interests of the users are always taken into account. Information on the legal basis for processing at Facebook can be found at http://www.facebook.com/about/privacy/legal_bases/.

When visiting our Facebook fan page, Facebook collects and processes personal data on the basis of legitimate interest pursuant to Art. 6 DSGVO. Part of this data is made available to us in summarized form via the so-called "Insights" (Facebook user statistics). A cookie is stored on the user's end device for this purpose. This serves the purpose of being able to use this information again at a later date. The cookie remains active for a period of two years if it is not deleted. Further information from Facebook on the use of cookies can be found in the Facebook cookie policy at https://de-de.facebook.com/policies/cookies/. The transmission of these user statistics takes place exclusively in anonymized form and there is no possibility of access on our part to the underlying data in each case.

Whether Facebook transmits personal data to third parties is beyond our control. It is possible that Facebook Inc., based in the USA, processes personal data outside the European Union.

If you are already logged in to Facebook via your personal user account, information about your visit to our website is automatically forwarded to Facebook. It is then possible that Facebook assigns the visit to the website to your account. If you do not wish your data to be transmitted and stored by Facebook, please log out of your Facebook account.

LinkedIn

On our website we use a link to the social network LinkedIn, which is operated exclusively by LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; hereinafter "LinkedIn"). The link is identified by the LinkedIn logo (no LinkedIn plug-in).

When you click on the LinkedIn logo, your browser establishes a direct connection with the LinkedIn servers. If you are already logged in to LinkedIn via your personal user account, the information about your visit to our website is automatically forwarded to LinkedIn. It is then possible that LinkedIn assigns the visit to the website to your account. We would like to point out that we have no knowledge of the content of the transmitted data or its use by LinkedIn. The following link leads to the LinkedIn data protection declaration: http://de.linkedin.com/legal/privacy-policy.

Twitter

On our website we use a link to our presence on the social network Twitter. This is an application of Twitter Inc. (1355 Market St, Suite 900, San Francisco, CA 94103, USA; hereinafter: "Twitter").

The Twitter function integrated on our website is operated by Twitter Inc. (1355 Market St, Suite 900, San Francisco, CA 94103, USA). By using this function, your visit to our website is linked to your Twitter account. In the course of this, data is automatically transmitted to Twitter. If you do not wish any data to be transmitted to Twitter, you can change your account settings on Twitter. We would like to point out that we have no knowledge of the content of the transmitted data or its use by Twitter. You can find further information at: https://twitter.com/de/privacy.

XING

On our website we use a link to our presence on the social career network XING. This is an application of XING SE (Dammtorstraße 30, 20354 Hamburg; hereinafter: "XING"). We would like to point out that we have no knowledge of the content of the transmitted data or its use by XING.

We are using XING functions on our website. When you visit the website, your web browser connects for a short time to the XING servers through which the XING functions are provided (e.g. calculation of the counter value). XING does not use cookies and does not store any personal data. Furthermore, there is no evaluation of your usage behavior. We would like to point out that we have no knowledge of the content of the transmitted data or its use by XING. You can find further information at: https://www.xing.com/app/share?op=data_protection.

YouTube

We operate a presence on the video platform YouTube. This is an application of YouTube LLC (901 Cherry Ave, San Bruno, CA 94066 USA; hereinafter: "YouTube").

We would like to point out that we have no knowledge of the content of the transmitted data or its use by YouTube. You can find further information at: www.google.de/intl/de/policies/privacy/. There is a possibility that personal data will be transferred to the USA in the course of using this Google service.

novaCapta Apps

The following applies to Microsoft Teams, SharePoint and Azure services and applications (collectively, "Apps") operated by novaCapta. We are collecting und using data to improve and personalize your experience. We may also use the data to communicate with you, for example as part of support consultations or troubleshooting sessions and to notify you of new product updates.

We do not share your personal data with advertisers or other third parties. If we access third-party services for our applications, which in turn require additional personal data for their offers, we act with the strictest data economy. In such cases, you will find explicit information in this section. Likewise, it is marked when only individual apps collect specific personal data.

Our apps

  • novaCapta Building Explorer
  • novaCapta Product Explorer
  • novaCapta Compass

When registering and using the apps, we collect the following personal data:

  • First and last name, login name, password, position, company name, contact telephone number, city, region, country, postcode, and email address for product registration
  • Tenant ID and Tenant Name
  • Group ID and Team Name
  • Admin user name, email, and phone number
  • User ID and user email
  • IP address(es) (a number assigned to your computer when you use the Internet)
  • Date and time of your visit
  • Use of service quantities

novaCapta retains personal data that we process on behalf of our users for as long as necessary to provide services to our customers. novaCapta retains and uses this personal data as necessary to comply with our legal obligations, resolve disputes and enforce our agreements.

Your rights to information, correction, blocking, deletion and objection

You have the right to obtain information about your personal data stored by us at any time. You also have the right to have your personal data corrected, blocked or, apart from the mandatory data storage for business processing, deleted. Please contact our data protection officer for this purpose.

So that a blocking of data can be taken into account at any time, this data must be kept in a blocking file for control purposes. You can also request the deletion of data, unless there is a legal archiving obligation. If such an obligation exists, we will block your data upon request.

You can make changes or revoke consent by notifying us accordingly with effect for the future.

Changes to our data protection policy

We reserve the right to amend this data protection declaration from time to time so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection statement will then apply to your next visit.

Questions to the data protection officer

If you have any questions about data protection, please write us an e-mail or contact our data protection officer directly:

[email protected]