Data Protection

Table of Contents:

1. General Information

PRECIRE Technologies GmbH guarantees the responsible handling of your personal data. In doing so,
we treat the security, data protection and privacy of our website visitors with particular care.

In the following we inform you about the collection of personal data when using this website.
Personal data is all data that can be related to you personally, e.g., name, address, e-mail addresses,
user behavior

The controller pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is:

PRECIRE Technologies GmbH
Charlottenburger Allee 40
52068 Aachen, Germany
E-Mail: info@precire.com
(see Legal Notice for further contact details).

You can contact our [external] data protection officer at
Thomas Rosin
Desdorfer Str. 14
50189 Elsdorf, Germany
E-Mail: datenschutz@precire.com

2. Contacting Us

You can send us an inquiry using our e-mail addresses and our general contact form. The personal
data that you provide to us in connection with this inquiry will be stored by us in order to answer
your inquiry. We delete the data arising in this connection after storage is no longer necessary, or
restrict processing if there are legal retention obligations. Data will not be disclosed to third parties.
(Legal basis is Article 6 (1)(b) GDPR)

3. Your Rights

You have the following rights in relation to us with regard to your personal data:

  • right to information,
  • right to rectification or deletion
  • right to restrict processing
  • right to object to processing
  • right to data transferability.

You also have the right to complain to a data protection supervisory authority about our processing
of your personal data

4. Collection of Personal Data when You Visit our Website

If you only use the website for informational purposes, i.e., if you do not register or otherwise
provide us with information, we only collect the personal data that your browser transmits to our
server. If you wish to view our website, we collect the following data which is technically necessary
for us to display our website to you and to guarantee stability and security (legal basis is Article 6
(1)(b) GDPR in conjunction with Article 32 (1) GDPR and Section 13 (7) Telemedia Act (TMG)):

  • IP address
  • date and time of the request
  • time zone difference to Greenwich Mean Time (GMT)
  • content of the request (specific page)
  • access status/HTTP status code
  • amount of data transferred each time
  • web page from which the request comes
  • browser
  • operating system and its interface
  • language and version of the browser software.

This data with complete, possibly personally relatable IP addresses, which are stored by us for
reasons of technical security, in particular to prevent attempts to attack our web server, is
anonymized/deleted after 7 days at the latest

5. Collection of Personal Data when Using the precire.ai Portal
5.1 Registration

We give you the opportunity to test our PRECIRE technology free of charge in our precire.ai portal.
This requires registration on our website. This requires your first and last name, e-mail address and a
password of your choice. There is no obligation to use a real name; use of a pseudonym is allowed.

In order to successfully complete registration, it is necessary to have read the Privacy Policy and the
Terms of Use and to accept them by clicking on them.

We use the so-called double opt-in procedure for registration, i.e., your registration is only complete
after you have confirmed your registration by clicking on the link included in a confirmation e-mail
sent to you for this purpose. If your confirmation is not received within 24 hours, your registration
will be automatically deleted from our database. The provision of the aforementioned data is
mandatory, you can voluntarily provide any addition information by using our portal.

If you use our precire.ai portal, we store your data necessary for the performance of the contract
until you finally delete your access (legal basis is Article 6 (1) (b) GDPR). Furthermore, we store the
data you have voluntarily provided for the duration of your use of the portal, unless you delete it
beforehand. You can manage and change all data in the protected user profile (legal basis is Article 6
(1) (f) GDPR).

5.2 Login

In order to be able to access the precire.ai portal as a registered user, a login via e-mail address and
the password freely chosen by you is required before each use.

You can manage and edit your personal data within the registered area.

5.3 Deletion of Your User Account and Associated Data

You can delete your user account at any time using the “Close user account” feature. Further use of
the user account and the associated precire-ai features, in particular the PRECIRE API, will then no
longer be possible. Your data associated with the user account in our portal will be deleted
immediately.

Re-registration with the same e-mail address you used for the deleted account is usually possible
within a few minutes after deletion.

6. Use of PRECIRE Technology

Additional access data is required to use the PRECIRE API. This is provided to you in the preicre.ai
portal if you are authorized to use the PRECIRE API.

The data provided by you via the PRECIRE API or via the demo applications available on our website
will be automatically deleted after processing by PRECIRE technology and provision of the processing
result. Permanent storage of this data does not take place

If you wish to use our PRECIRE API or the demo applications available on our website, we collect the
following data which is technically necessary for us to provide these services to you and to guarantee
stability and security (legal basis is Article 6 (1)(b) GDPR in conjunction with Article 32 (1) GDPR and
Section 13 (7) Telemedia Act (TMG)):

  • IP address
  • date and time of the request
  • time zone difference to Greenwich Mean Time (GMT)
  • content of the request (application or function called)
  • access status/HTTP status code
  • amount of data transferred each time

This data with complete, possibly personally relatable IP addresses, which are stored by us for
reasons of technical security, in particular to prevent attempts to attack our web server, is
anonymized/deleted after 7 days at the latest.

7. Objection to or Revocation Regarding the Processing of Your Data

If you have given your consent to the processing of your data, you can revoke it at any time. Such a
revocation influences the permissibility of the processing of your personal data after you have given
it to us.

You may object to the processing insofar as we base the processing of your personal data on a
weighing of interests. This is the case if, in particular, the processing is not required to perform a
contract with you, which we present in the following description of the functions. In the event of
such an objection, we ask you to explain the reasons why we should not process your personal data
as we have done. In the case of your justified objection, we will examine the situation and will either
discontinue or adapt the data processing or point out to you our compelling legitimate reasons based
on which we continue the processing.

8. Convenience Features

We use technologies such as JavaScript and CSS (cascading style sheets) for an optimal presentation
of our website (e.g., adaptation to different screen sizes, displayable menu, input control of the
contact form). The use of these technologies can be disabled by you through the appropriate settings
in your browser. In this case, however, parts of our internet website may no longer be usable for you.

9. Social Media

We provide you with links to social media platforms (such as XING) in various sections of our website.
You can recognize them by the logo of the respective social media provider. When you use our
website, no personal data is initially passed on to the providers of social media platforms. Only when
you click on these links will you be redirected to the website of the respective social media provider
and then transmit personal data to the provider. You are thereupon leaving our website and we have
no influence on the data collected and data processing processes, nor are we aware of the full scope
of data collection, purposes or storage periods.

If you click on such a link, the social media provider receives the information that you have accessed
the corresponding subpage of our online service. In addition, the data specified in the section
“Collection of personal data for informational use” of this declaration will be transmitted. This occurs
regardless of whether you have an account with this social media provider and are logged in there. If
you are logged in to the social media provider, this data is directly associated with your account.

The social media provider stores the personal data as a usage profile and uses it for the purposes of
advertising, market research and/or the needs-based design of its website. Such an analysis is carried
out in particular (also for users who are not logged in) in order to display targeted advertising and to
inform other users of the social network about your activities on our website. You have the right to
object to the creation of this user profile, whereby you must contact the respective social media
provider to exercise this right.

Further information on the purpose and scope of the data collection and its processing by the social
media provider can be found in the following privacy policies of these providers. There you will also
find further information on your rights in this regard and the setting options to protect your privacy.

Addresses of the respective providers and URL with their privacy policy information:

a) LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland;
http://www.linkedin.com/legal/privacy-policy.

b) Xing AG, Gänsemarkt 43, 20354 Hamburg, Germany; http://www.xing.com/privacy.

c) YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland;
https://policies.google.com/privacy?hl=en

10. Integration of Google Maps

We use the services of Google Maps in the “Contact” section of our website. This enables us to
display an interactive map directly on the website and enables you to conveniently use the map
function (legal basis is Article 6 (1)(f) GDPR).

When you visit our website, Google receives the information that you have accessed the
corresponding subpage of our website. In addition, the data specified in the section “Collection of
personal data for informational use” of this declaration will be transmitted. This occurs regardless of
whether Google provides a user account that you are logged in to or whether there is no user
account. If you are logged in to Google, your information will be directly associated with your
account. If you do not want your profile to be associated with Google, you must log out before
clicking the button. Google stores your data as a usage profile and uses it for the purposes of
advertising, market research and/or the needs-based design of its website. Such an analysis is carried
out in particular (as well as for users who are not logged in) in order to display targeted advertising
and to inform other users of the social network about your activities on our website. You have the
right to object to the creation of this user profiles, whereby you must contact Google to exercise this
right.

Further information on the purpose and scope of data collection and processing by the plug-in
provider can be found in the provider’s privacy policy. There you will also find further information on
your rights in this regard and the setting options to protect your privacy: Google Ireland Limited,
Gordon House, Barrow Street, Dublin 4, Ireland; https://policies.google.com/privacy?hl=en

11. Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Ireland Ltd.
(“Google”). Google Analytics uses “cookies”, which are text files stored on your computer, to help the
website analyze how users use the site. The information generated by the cookie about your use of
this website will generally be transmitted to and stored by Google on servers in the United States.
However, if IP anonymization is enabled on this website, Google will truncate your IP address
beforehand within member states of the European Union or other signatory states to the Agreement
on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a
Google server in the USA and truncated there. On behalf of the operator of this website, Google will
use this information to analyze your use of the website, to compile reports on website activity and to
provide other services related to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics is not combined with other
data from Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser; however,
please note that if you do this you may not be able to use the full functionality of this website. You
can also prevent the collection by Google of the data generated by the cookie and related to your use
of the website (including your IP address) and the processing of this data by Google by downloading
and installing the browser plug-in available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=en.

You can prevent Google Analytics from collecting data by clicking on the following link. An opt-out
cookie is set to prevent your data from being collected in the future when you visit this website:
[google_analytics_optout]Disable Google Analytics[/google_analytics_optout]

Please note that if you disable all cookies, opt-out cookies will also be removed.

This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP
addresses are further processed in a truncated form, thus excluding the possibility of direct reference
to an individual. If the data collected about you is personalized, this is therefore immediately
excluded and the personal data is immediately deleted.

We use Google Analytics to analyze and regularly improve the use of our website. The statistics
obtained will enable us to improve our services and make them more interesting for you as a user.
(Legal basis for the use of Google Analytics is Article 6 (1)(f) GDPR)

Third party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4,
Ireland, Fax: +353 (1) 4361001. Terms of service:
https://marketingplatform.google.com/about/analytics/terms/us/;
Data privacy and security:
https://support.google.com/analytics/topic/2919631?hl=en&ref_topic=1008008;
Privacy policy:
https://policies.google.com/privacy?hl=en-US.

12. Content Delivery Networks

This website uses Content Delivery Networks (CDN) to display the content of the website more
efficiently (legal basis is Article 6 (1)(f) GDPR). CDNs speed up the loading time of common JavaScript
libraries and fonts, as the files used are transferred from fast, nearby or underutilized servers. Among
other things, the IP address of the user is transmitted to the provider of the CDN service.

You can prevent the collection and processing of your data by CDN providers by disabling the
execution of script code in your browser or by installing a script blocker in your browser (this can be
found, for example, at www.noscript.net or www.ghostery.com).

We use the following CDN providers on our website:

12.1 Cloudflare (https://www.cloudflare.com, provider: Cloudflare Inc., 101
Townsend St, 94107 San
Francisco):

Cloudflare operates servers in the EU, but it cannot be ruled out that servers outside the EU,
especially in the USA, are also used. Cloudflare is certified under both the EU-US Privacy Shield
Frameworks and the Swiss-US Privacy Shield Frameworks issued by the US Department of Commerce
with respect to the collection, use and retention of personal data transferred from the
EEA/Switzerland to the United States. For more information on the Privacy Shield between the EU
and the US and between Switzerland and the US, please visit the US Department of Commerce’s
Privacy Shield website at https://www.privacyshield.gov/welcome.

You can find more information about Cloudflare’s data protection at
https://www.cloudflare.com/de-de/privacypolicy.

12.2 BootstrapCDN (https://www.stackpath.com/maxcdn/, provider:
StackPath, LLC, 2021 McKinney
Avenue, Suite 1100 Dallas, Texas 75201):

StackPath is certified for the EU-US Privacy Shield Framework issued by the U.S. Department of
Commerce with respect to the collection, use, and retention of personal data transferred from the
EEA to the United States. For more information on the Privacy Shield between the EU and the US,
please visit the US Department of Commerce’s Privacy Shield website at
https://www.privacyshield.gov/welcome.

You can find more information about StackPath’s data protection at
https://www.stackpath.com/legal/privacy-statement/.

12.3 JSDELIVR (https://www.jsdelivr.com, provider: Prospectone Sp. z o.o.,
ul. Krolweska 65A, 30-
081, Krakow, Poland):

Prospectone operates servers in the EU, but it cannot be ruled out that servers outside the EU are
also used. You can find more information about JSDELIVR’s data protection at
https://www.jsdelivr.com/privacy-policy-jsdelivr-net.

13. Additional Information

Personal data processed in connection with the provision of this website will be disclosed to the
following categories of recipients:

  • Providers of technical services and services (e.g., data center services) which are used by the
    controller without exception as contract processors.
  • Providers of technical services as described in sections 10 to 12.

There will be no automated decision making in connection with your use of this website that could
have any legal effect on you or which would similarly materially affect you.

As regards the indication of the duration of the retention, it should generally be noted that personal
data is kept by the controller only for as long as is necessary to pursue the purpose of its processing.
You can find more specific information about the storage period in the preceding sections of this
Privacy Policy.

14. Data in the Legal Notice

We expressly object to the use by third parties of contact data published within the scope of the legal
notice obligation to send unsolicited advertising and information material. We expressly reserve the
right to take legal action against unsolicited mailing or e-mailing of spam and other similar
advertising materials.

15. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy in compliance with the legal data protection
provisions. The currently valid version can be viewed by you at any time in the Privacy Policy section
of our website.