DataNXT respects your privacy and is committed to securing and protecting any information we have about you. This policy (the "Privacy Policy") covers our treatment of personal data about you whenever you access or use DataNXT's website (the "Site") and future services, features and technologies ("Services"). The Privacy Policy also covers other interactions you have with DataNXT and describes your rights and how you can exercise them. The Site and Services are collectively referred to as "Online Services".
You accept this Privacy Policy by using the Online Services. If you have any questions or concerns about the Privacy Policy, please contact us at info@datanxt.de.
1. Roles and Responsibility
DataNXT's Services will be offered to companies and/or other legal entities for professional use (our "Subscribers"). Our Subscriber agreements will govern the delivery and use of the Services ("Subscriber Agreements").
This Privacy Policy applies when DataNXT is the data controller responsible for processing personal data. It does not apply to any input submitted to, output generated by, or documents uploaded to our Services ("Content"). We will process Content as a data processor on behalf of our Subscribers (the data controllers), and our processing of Content will be governed by the relevant Subscriber Agreement. Any queries related to data that can be used to identify you ("personal data") included in Content should be directed to our Subscribers. If we receive any rights requests concerning instances where we act as data processor, we will forward them to the relevant Subscriber.
DataNXT may maintain links to other websites and other websites may maintain links to the Online Services. This Privacy Policy only applies to datanxt.de and related DataNXT domains, and not to other websites accessible from DataNXT or websites that you use to access DataNXT.
2. What Information Does DataNXT Collect
2.1 Information You Provide to Us
We collect personal data provided to us if you create an account to use our Services or communicate with us as follows:
User account information: We will require everyone with access to our Services to have an account with us. When you or your employer creates a DataNXT account for you, we will collect personal data including your name, email address, role, language preferences and account credentials.
Communication information: When you contact us for customer support, feedback, or inquiries, we collect your name, email address, phone number, and any other information you provide us with to assist you or resolve your issue. DataNXT may monitor and record phone conversations or email communications between you and DataNXT employees for training and quality assurance purposes. We may receive a confirmation when you open or click on content in an email from us, which helps us make our communications to you more useful and interesting.
Social media information: We have accounts on social media sites like LinkedIn, YouTube and X ("Social Media"). When you interact with our Social Media, we will collect personal data that you elect to provide to us, such as your contact details and third parties that host our Social Media may provide us with aggregate information and analytics regarding your use of our Social Media.
Survey and contest information: We may provide you the opportunity to participate in surveys on our Site, to measure customer satisfaction. If you participate, we may request certain personally identifiable information from you. Participation in these surveys or contests is completely voluntary, and you therefore have a choice whether or not to disclose this information. The requested information typically includes name, email address, and mailing address.
Testimonial and review information: We may display personal testimonials or reviews from satisfied users if you have consented to it. If you wish to update or delete your testimonial or review, you can contact us.
2.2 Information We Automatically Collect
When you visit, use, and interact with our Services, we will collect certain information about your visit, use, or interactions ("Technical Information") indirectly, including through automated means from your computer or device, including the following:
Log data: Whenever you visit the Online Services, your browser will automatically send us your IP address, browser type and settings, the date and time of your request, and how you interacted with the Online Services.
Device information: We will automatically collect information about the device you are using to access the Online Services, including name of the device, operating system, browser, referring/exit pages, operating systems, date/time stamps, and clickstream data. The information collected may depend on the type of device you use and its settings.
Usage data: We will automatically collect information about your use of our Services, including, name, email address, the features you use, actions you take, your time zone, location, the dates and times of access, amount of time spent within the Services and types and volumes of queries you submit. We will however never collect or store any data directly related to your Content other than in accordance with the applicable Subscriber Agreement.
Cookies: A cookie is a small string of information that websites you visit transfer to your computer for identification purposes. Cookies can be used to follow your activity on the website and that information helps us to understand your preferences and improve your website experience. Cookies are also used for such activities as remembering your access credentials for our Services. In addition to the cookies used by DataNXT and our service providers, some cookies are placed by third parties such as Google (for analytics). DataNXT uses cookies for the following purposes:
- Essential Cookies: these are essential in order to enable you to move around the website and use its features, such as accessing secure areas of the website.
- Performance and Analytics Cookies: these include Google Analytics and they keep track of the pages that you visit on our Site and the content you access, so we can determine which content is most popular and improve the performance of our website. These cookies primarily record aggregate and anonymous statistical data, but may capture a minimal amount of identifiable information.
- Functional Cookies: these cookies remember the choices you make, such as language options or the region you are in. They help to make your visit more personal and are deleted automatically when you close your browser or the session expires.
You can turn off all cookies, in case you prefer not to receive them. You can also have your computer warn you whenever cookies are being used. For both options, you must adjust your browser settings (such as Chrome, Safari, Firefox, Edge, or other browser). There are also software products available that can manage cookies for you. Please be aware, however, that when you choose to reject cookies you may limit the features and functionality of our Services.
2.3 Information Collected from Third Parties
We may collect information about you from third parties, such as security partners, marketing vendors and event organizers. Our Subscribers may give us information about you, such as your contact details, in order to facilitate us providing our Services. We may combine this information with information we collect from you and use it as described in this Privacy Policy.
2.4 Publicly Available Information
We will provide access to publicly available information (for example, financial reports and regulatory filings) within our Services. Some of this information may relate to individuals and can, in some jurisdictions, be considered personal data. Personal data included in publicly available information will only be processed so that our Services can provide more accurate and relevant responses. It is not provided to intentionally identify individuals.
DataNXT also collects publicly available information about Subscribers and prospects, including name, email address, phone number and other contact details.
2.5 Aggregated Information
DataNXT may aggregate personal data and use the aggregated information to analyze the effectiveness of our Services, improve and add features to our Services. In addition, from time to time, we may analyze the general behavior and characteristics of users of our Services and share aggregated information like general user statistics with third parties, publish such aggregated information or make such aggregated information generally available. We may collect aggregated information through the Services, through cookies, and through other means described in this Privacy Policy.
3. How We Use Your Personal Data
DataNXT may use your personal data for the following purposes:
- to provide, administer, maintain, and/or improve our Services;
- to provide you with support services, resolve issues or reply to your queries;
- to manage and remember your preferences and customize the Services;
- to communicate with you, including to send you information or marketing about our Services and events;
- to analyze and study the effectiveness of our Services and to develop new features and services;
- to verify your identity, prevent fraud, criminal activity and to ensure the security of our IT systems, architecture, and networks;
- to prevent misuse of the Services and enforce our legal terms;
- to comply with legal obligations and legal processes, and;
- to protect DataNXT's rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties.
Detailed Processing Information
The following disclosures provide additional information about the categories of Personal Information we collect, the type of data, how we use each category of Personal Information, and our legal basis for processing:
Customer Relationship Management
Purpose: To manage our customer relationship with you and/or your employer in accordance with our agreements.
Types of personal data: User account information, Communication information, Log data, Device information, Usage data.
Legal basis: The processing is necessary for DataNXT to perform a contract with you and/or your employer (Article 6(1)(b) GDPR).
Data retention: When the relevant contracts terminate.
Customer Satisfaction and Market Research
Purpose: To perform end user satisfaction surveys, conduct market research and request reviews.
Types of personal data: Survey and contest information, Testimonial and review information, Technical Information.
Legal basis: Legitimate interests (Article 6(1)(f) GDPR). We have determined that we have a legitimate interest in performing this processing, that it is necessary to achieve that purpose, and that our interest outweighs your right not to have your data processed for this purpose.
Data retention: When the contract between us terminates.
Network and Information Security
Purpose: To ensure network and information security in DataNXT's Services.
Types of personal data: User account information, Technical Information.
Legal basis: Legitimate interests (Article 6(1)(f) GDPR). We have a legitimate interest in ensuring network and information security, and it is also in your interest as a user that we ensure good information security.
Data retention: For as long as you are using the Services.
Service Development and Improvement
Purpose: To perform data analysis for development and improving our Services.
Types of personal data: User account information, Technical Information.
Legal basis: Legitimate interests (Article 6(1)(f) GDPR). We have a legitimate interest in using your personal data for product development purposes and analyzing customer behavior to improve the service and customer experience.
Data retention: For as long as you are using the Services.
Marketing and Communications
Purpose: To provide you with direct marketing about offers, products or services from DataNXT.
Types of personal data: Communication information, Social media information, Technical Information.
Legal basis: Consent (Article 6(1)(a) GDPR).
Data retention: Until you withdraw your consent or opt-out.
Legal Protection
Purpose: To protect DataNXT from legal claims and safeguard DataNXT's legal rights.
Types of personal data: All types mentioned in Section 2. In the event of a dispute, we may also collect other types of personal data concerning you if we need them to exercise our rights.
Legal basis: Legitimate interests (Article 6(1)(f) GDPR). We have a legitimate interest in protecting ourselves from legal claims.
Data retention: For the entire period during which DataNXT must retain the information in its systems, for example to perform the contract with you and your employer or to comply with applicable law.
4. With Whom We Share Your Personal Data
In certain circumstances, we may share your Personal Information with third parties without further notice to you, unless legally required, including without limitation in the situations below:
Affiliates: DataNXT may share your personal data with other entities within the DataNXT corporate group (our "affiliates"). DataNXT's affiliates will only use the personal data we share with them in a manner consistent with this Privacy Policy.
Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share your personal data with vendors and service providers, including providers of hosting services, cloud service providers, and other information technology services providers, event management services, email communication software and email newsletter services, advertising and marketing services, and web analytics services. Pursuant to our instructions, these parties will access, process, or store personal data in the course of performing their duties to us.
Third-party Websites and Services: Our Services may contain links to other websites not operated or controlled by DataNXT, including social media services ("third-party sites"). The information that you share with third-party sites will be governed by the specific privacy policies and terms of service of the third-party sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the third-party sites directly for information on their privacy practices and policies.
Other Users: When you are using the collaboration features within DataNXT, certain actions you take may be visible to other users of our services.
Plug-Ins: When you are using third party applications and choose to connect your DataNXT account with such external third-party applications, the providers of those services or products may receive information about you from DataNXT or others. Please be aware that when you use third-party sites or services, their own terms and privacy policies will govern your use of those sites or services.
Business Changes: If we are involved in strategic transactions, (such as sale, merger, reorganizations, liquidation, or transition of service to another provider), your personal data and other information may be shared in the diligence process with counterparties and others assisting with the transaction and transferred to a successor or affiliate as part of that transaction along with other assets.
Legal Requirements: DataNXT may also share your personal data if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, including to meet national security or law enforcement requirements, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users of the Services, or the public, or (v) protect against legal liability.
5. International Transfers
DataNXT always strives to process your personal data as close to you as possible. By using our Online Services however, you understand and acknowledge that your personal information may be transferred from your location to our facilities and servers in the EU/EEA.
In certain situations, such as when we share your information within the DataNXT corporate group or with a supplier or subcontractor, your personal data may be transferred outside EU/EEA. DataNXT always ensures that the same high level of protection applies to your personal data according to the relevant data protection laws, even when the data is internationally transferred. Your rights in respect to your personal data (described in detail in section 6), are not affected when data is internationally transferred.
Safety Measures DataNXT Uses When Conducting International Transfers
Countries outside of the EU/EEA may have laws that allow public authorities to request access to personal data stored in the country for the purpose of combating crime or safeguarding national security. Regardless of whether we or any of our providers process your personal data, we will ensure that a high level of protection is guaranteed when transferring that data and that appropriate protection measures have been taken, in accordance with applicable data protection requirements (such as the GDPR).
Such appropriate safeguards include, but are not limited to:
- Adequacy decisions: If the relevant authority (e.g. the EU Commission) has decided that the country to which your personal data are transferred has an adequate level of protection.
- Standard Contractual Clauses: The relevant authority's standard clauses have been entered into between DataNXT and the recipient of the personal data.
- Derogation: In limited circumstances, we may rely on an exception under the applicable data protection laws.
- Data Privacy Framework: If the transfer is covered by a relevant data privacy framework, such as the EU-US Data Privacy Framework.
6. What Are Your Rights
You have several rights under the applicable data protection laws (including the GDPR) related to your control over your personal data and to receive information directly from us on how we process personal data about you:
Right to information and access: You have the right to be informed of how we process your personal data. You can request information regarding whether we are processing your personal data and ask to receive a copy of your personal data ("data extract").
Right to rectification: If you believe that your personal data is inaccurate or incomplete, you have the right to ask for it to be corrected or completed.
Right to restriction: If you believe that your personal data is inaccurate, that our processing is unlawful or that we do not need the information for a specific purpose, you have the right to request that we restrict the processing of such personal data.
Right to object: You have the right to object to the processing of your personal data which is based on our legitimate interest (Article 6(1)(f) GDPR), by referencing your personal circumstances. You can also always object to our processing of your personal data for direct marketing purposes.
Right to be forgotten: In some cases, you have the right to have us delete personal data about you. For example, you can request us to delete personal data that we no longer need for the purpose it was collected for, or process based on your consent and you revoke your consent.
Right to transfer your personal data (data portability): If we process your personal data to fulfill a contract or on the basis of your consent, you may, in certain cases, be able to obtain the personal data for use elsewhere.
Right to withdraw consent: In those cases where we process your personal data based on your consent, you have the right to withdraw your consent at any time.
Right to lodge a complaint: If you have objections or concerns about how we process your personal data, you have the right to contact, or lodge a complaint with, the relevant authority for privacy protection.
To exercise your rights, please contact us at info@datanxt.de. We reserve the right to limit our facilitating such requests to that which is required by applicable law. In order to protect your personal data from unauthorized access or deletion, we may require you to verify your identity before we will process any request.
7. How Do We Keep Your Personal Data Safe
We take significant and appropriate steps to protect your personal data in an effort to prevent loss, misuse, and unauthorized access, disclosure, alteration and destruction. We use appropriate technical and organizational measures to protect your personal information which may include: physical access controls, encryption, intrusion detection and network monitoring depending on the nature of the information and the scope of processing.
For more information regarding our security measures, please view our Security Policy.
8. How Long Do We Store Your Personal Data
DataNXT retains your personal information for as long as necessary to fulfill the purposes for which we collected it or longer if that is required under applicable law:
- If you are a DataNXT user covered by a Subscription Agreement between your employer and DataNXT, we will delete your data in accordance with that Subscription Agreement.
- Personal data that DataNXT is under a legal obligation to retain, for example under anti-money laundering or bookkeeping laws, is retained for the required periods under applicable laws (generally for 5 or 7 years).
- Personal data which is not used for the purposes of a contractual relationship or where DataNXT does not have a legal obligation to retain the data is only retained as long as necessary to fulfil the respective purpose for our data processing (usually 3 months).
In some limited cases, the personal data may need to be stored for a longer period in order for DataNXT to protect its legal rights. When we no longer need your personal data, we will delete it or anonymize it in accordance with our data retention policies and applicable laws, or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible.
9. Updates to This Privacy Policy
We may update this Privacy Policy from time to time. When the Privacy Policy is updated, we will post an updated version on this page, unless another type of notice is required by applicable law or contractual agreement. By continuing to use our Online Services or providing us with personal data after we have posted an updated Privacy Policy, or notified you by other means, you consent to the revised Privacy Policy.
10. Contact Us
If you have any questions about our Privacy Policy or any other privacy related issue, please contact us at info@datanxt.de.
Controller's Contact Information:
DataNXT GmbH
Theodor-W.-Adorno-Platz 1
60629 Frankfurt am Main
Goethe-Universität Frankfurt am Main
Germany