search search
search search
Ista Logo

Data pro­tec­tion at ista: The pro­tec­tion of your per­sonal data is very im­port­ant to ista.

ista has been a mem­ber of the Ger­man So­ci­ety for Data Pro­tec­tion and Data Se­cur­ity (Gesell­schaft für Datens­chutz und Datensicher­ung e.V.(GDD)) since Feb­ru­ary 2002.

ista com­plies with the legal data pro­tec­tion reg­u­la­tions and does everything to keep your and your cus­tomer’s/ten­ant‘s data con­fid­en­tial. All per­sonal data is col­lec­ted, pro­cessed and used in ac­cord­ance with the pro­vi­sions of the Gen­eral Data Pro­tec­tion Reg­u­la­tion (GDPR) and only for the pur­poses of con­tract pro­cessing, ful­fil­ment of legal ob­lig­a­tions or for safe­guard­ing our own le­git­im­ate busi­ness in­terests with re­gard to the ad­vice and sup­port of the cus­tom­ers as well as the demand-​oriented product design.

All ser­vice pro­viders of ista deal­ing with the pro­cessing of per­sonal data also com­ply with the pro­vi­sions of the GDPR in ac­cord­ance with Art. 28 GDPR. Com­pli­ance is mon­itored by our data pro­tec­tion of­ficer.

1. Col­lec­tion and pro­cessing of per­sonal data

Each time a user ac­cesses the ista web­site and each time a file is ac­cessed, data about that activ­ity is stored in a log file. These data are not re­lated to a per­son; so ista can­not trace back which user has re­trieved which data.

In de­tail, the fol­low­ing data re­cord is saved for each call:

  • Name of the file
  • Date and time of ac­cess
  • Amount of data trans­ferred
  • Mes­sage whether the call was suc­cess­ful
  • An­onym­ous IP-​Address
  • If ne­ces­sary, op­er­at­ing sys­tem and browser soft­ware on your com­puter
  • As well as the web­site from which you vis­ited the ista web­site

Per­sonal user pro­files can­not be cre­ated.

The above-​mentioned data are eval­u­ated for stat­ist­ical pur­poses only.

Per­sonal data will only be col­lec­ted if you give it to ista on your own - for ex­ample, when re­gis­ter­ing for a sur­vey or con­duct­ing a con­tract. A trans­mis­sion of your data to third parties does not take place, un­less ista is leg­ally ob­liged to do so. In­so­far as ex­ternal ser­vice pro­viders come into con­tact with your per­sonal data, ista has en­sured that they com­ply with the pro­vi­sions of data pro­tec­tion laws through legal, tech­nical and or­gan­iz­a­tional meas­ures as well as reg­u­lar checks.

Cook­ies:

ista uses so-​called cook­ies on the ista web­site to re­cog­nize mul­tiple use of the offer by the same user/in­ter­net con­nec­tion owner. Cook­ies are small text files that your in­ter­net browser stores on your com­puter. They serve to op­tim­ize ista's in­ter­net pres­ence and of­fers. The cook­ies are usu­ally so-​called "ses­sion cook­ies", which are de­leted after the end of your visit.

In some cases, how­ever, these cook­ies provide in­form­a­tion in order to auto­mat­ic­ally re­cog­nize you. This re­cog­ni­tion is based on the ID stored in the cook­ies. The in­form­a­tion ob­tained in this way serves to op­tim­ize ista's of­fers and to make it easier for you to ac­cess the ista web­site.

You may re­fuse the use of cook­ies by se­lect­ing the ap­pro­pri­ate set­tings in your browser; how­ever, ista points out that in this case you may not be able to use the full func­tion­al­ity of the ista web­site.

1.1 Webana­lyt­ics

1.2 Re­market­ing activ­it­ies and cook­ies

This web­site uses the re­market­ing or "sim­ilar tar­get group" func­tion of Google Inc. (Google Ire­land Lim­ited, Gor­don House, Bar­row Street, Dub­lin 4, Ire­land; „Google“).

This fea­ture al­lows you to view interest-​based ads on Google Dis­play Net­work web pages. For this pur­pose, a cookie is stored in your browser when you visit a web­site. This serves to re­cog­nize you as a vis­itor to the web­site and to de­term­ine vis­its and usage data.

Ac­cord­ing to Google's own in­form­a­tion, server logs are stored in which parts of the IP ad­dress and cookie in­form­a­tion are par­tially de­leted after 9 to 18 months. For more in­form­a­tion, please visit www.google.com/policies/tech­no­lo­gies/ads/.

An ex­ample of a server log is provided by Google at the fol­low­ing link: https://www.google.com/intl/en/policies/pri­vacy/key-​terms/#toc-​terms-​server-​logs.

There are sev­eral ways in which cook­ies can be de­ac­tiv­ated in the browser to ex­clude your own browser from re­market­ing.

Google provides the op­tion of down­load­ing a browser plug-​in that per­man­ently de­ac­tiv­ates these cook­ies under the fol­low­ing link: https://www.google.com/set­tings/ads/plu­gin

You can also make set­tings in your browser to de­ac­tiv­ate the in­stall­a­tion of cook­ies.

If you wish to ob­ject to track­ing, you can do so by ad­just­ing your browser set­tings re­gard­ing cookie in­stall­a­tions. You can find in­form­a­tion on this under the fol­low­ing links:

Fire­fox: https://sup­port.moz­illa.org/en-US/kb/clear-​cookies-​and-​site-​data-​firefox

In­ter­net Ex­plorer: https://sup­port.mi­crosoft.com/en-us/topic/delete-​and-​manage-​cookies-​168dab11-0753-043d-7c16-ede5947fc64d

Chrome: https://sup­port.google.com/ac­counts/an­swer/32050?hl=en

Sa­fari: https://sup­port.apple.com/en-gb/guide/sa­fari/sfri11471/mac 

Third-​party pro­viders may also dis­able browser cook­ies. The Net­work Ad­vert­ising Ini­ti­at­ive (NAI) of­fers the pos­sib­il­ity to im­ple­ment an opt-​out for your own browser. In­form­a­tion can be found on the fol­low­ing page:  http://op­tout.net­work­ad­vert­ising.org.

This web­site uses the con­ver­sion track­ing of "Google-​Adwords", a Google ser­vice.

When you visit Google pages, Google stores cook­ies. You can de­ac­tiv­ate or leave this stor­age ac­tiv­ated. If the cookie is still ac­tiv­ated and you visit cer­tain web­sites on the web­site, Google and ista can re­cog­nize that you have clicked on an ad placed by ista and have thus been for­war­ded to an ista page.

The in­form­a­tion col­lec­ted is used by Google to gen­er­ate stat­ist­ics for Ad­words cus­tom­ers. These stat­ist­ics in­clude in­form­a­tion about the num­ber of users who clicked on ads and were re­dir­ec­ted to pages that were tagged with a con­ver­sion track­ing tag.

You can find Google's pri­vacy policy here: https://policies.google.com/pri­vacy?gl=de&hl=en

1.3 Google Maps and Google Ad­dress Auto­com­plete

Sev­eral con­tact and order forms are avail­able for con­tact­ing ista. In this con­text, we ask for your ad­dress in order to pro­cess the re­quest. To help you enter the ad­dress, we use the Google Ad­dress Auto­com­plete func­tion of Google Inc. (Google Ire­land Lim­ited, Gor­don House, Bar­row Street, Dub­lin 4, Ire­land; "Google").

1.4 User­centrics

We use the User­centrics Con­sent Man­age­ment Plat­form for the col­lec­tion and man­age­ment of con­sents on this web­site.

Data pro­cessing pur­poses

This list con­tains the pur­poses for which data are col­lec­ted and pro­cessed. Con­sent is valid only for the pur­poses spe­cified. The data col­lec­ted can­not be used or stored for pur­poses other than those lis­ted below.  

  • Com­pli­ance with legal ob­lig­a­tions
  • Stor­age of con­sent

Tech­no­lo­gies used 

  • Local stor­age
  • En­able cook­ies

Data col­lec­ted

This list con­tains all (per­sonal) data that are col­lec­ted dur­ing or through the use of the ser­vice.

  • Browser in­form­a­tion
  • Opt-​in and opt-​out data
  • Re­quest URLs of the webpage
  • Page path of the webpage
  • Geo­graphic loc­a­tion
  • Date and time of the visit
  • Device in­form­a­tion

Legal basis

The re­quired legal basis for the pro­cessing of data is lis­ted in the fol­low­ing:

  • Art. 6, para. 1 s. 1 lit. c  GDPR

Loc­a­tion of pro­cessing

European Union (con­sent data­base is loc­ated in Bel­gium)

Re­ten­tion period

The re­ten­tion period is the period of time dur­ing which the data col­lec­ted are stored for pro­cessing. The data must be de­leted as soon as they are no longer needed for the stated pro­cessing pur­poses.
The con­sent data (con­sent given and with­drawal of con­sent) are stored for three years. The data are then de­leted im­me­di­ately or given to the per­son re­spons­ible on re­quest in the form of a data ex­port.

Data re­cip­i­ent

  • User­centrics GmbH

Data pro­tec­tion of­ficer of the pro­cessing com­pany 

Below you will find the email ad­dress of the data pro­tec­tion of­ficer of the pro­cessing com­pany.
datens­chutz@user­centrics.com

Click here to read the pri­vacy policy of the data pro­cessor:  https://user­centrics.com/privacy-​policy/

You can change your data pri­vacy set­tings here 

 

Mar­ket­ing

2. Rights of data sub­jects

In ac­cord­ance with the GDPR, ista takes ap­pro­pri­ate meas­ures to provide the data sub­ject with all in­form­a­tion and com­mu­nic­a­tions re­lat­ing to pro­cessing in a pre­cise, trans­par­ent, com­pre­hens­ible and eas­ily ac­cess­ible form in clear and simple lan­guage. The in­form­a­tion shall be trans­mit­ted in writ­ing or in any other form, in­clud­ing, where ap­pro­pri­ate, elec­tron­ic­ally.

Since ista pro­cesses per­sonal data auto­mat­ic­ally, ista in­forms you of the fol­low­ing in­form­a­tion in ac­cord­ance with Art. 13 GDPR:

Dr. Hagen Less­ing, ista SE, Lux­em­burger Straße 1, 45131 Essen, is the per­son re­spons­ible for ista.

The con­tact de­tails of ista's data pro­tec­tion of­ficer are:

ista SE, data pro­tec­tion of­ficer, Lux­em­burger Straße 1, 45131 Essen, Ger­many, e-​mail: Datens­chutz@ista.de

The pur­pose for which the per­sonal data are to be pro­cessed and the legal basis for the pro­cessing are as fol­lows: Op­tim­iz­a­tion of cus­tomer sat­is­fac­tion and the web­site, Art. 6 para­graph 1 f GDPR.

The le­git­im­ate in­terest in this is to be seen in par­tic­u­lar in the pseud­onym­ized pro­cessing for the op­tim­iz­a­tion of the web­site.

Data de­le­tion and dur­a­tion of stor­age

The per­sonal data of the data sub­jects will be de­leted or blocked as soon as the pur­pose of stor­age ceases to apply. Fur­ther­more, data may be stored if this has been provided for the European or na­tional le­gis­lator in EU reg­u­la­tions, laws or other pro­vi­sions to which the per­son re­spons­ible is sub­ject. The data will also be blocked or de­leted if a stor­age period pre­scribed by the afore­men­tioned stand­ards ex­pires, un­less there is a need for fur­ther stor­age of the data for the con­clu­sion or ful­fil­ment of a con­tract.

News­let­ter

ista of­fers you the op­tion to sub­scribe to a news­let­ter on the ista webpage. From this news­let­ter you will re­ceive in­form­a­tion on ista top­ics and of­fers at reg­u­lar in­ter­vals. To re­ceive this news­let­ter, you need a valid e-​mail ad­dress. Your entered e-​mail ad­dress will be checked by ista for ac­cur­acy and com­plete­ness. Your login data as well as your of­fi­cial IP ad­dress, date and time will be stored. This serves as se­cur­ity to pre­vent your e-​mail ad­dress from being mis­used by un­au­thor­ized third parties. No other data will be stored by ista. The data col­lec­ted will only be used for the news­let­ter dis­patch. ista un­der­takes not to trans­mit the data col­lec­ted to other third parties. You have the op­tion of can­cel­ling the news­let­ter at any time without giv­ing reas­ons and re­quest­ing in­form­a­tion from the ista site. The de­tails are marked in each news­let­ter.

3. Use and dis­clos­ure of per­sonal data and ear­mark­ing

Vis­it­ors to ista’s web­site are al­ways in­formed if their in­form­a­tion is trans­mit­ted to third parties. So you can de­cide whether you agree to a trans­fer of your per­sonal in­form­a­tion to third parties or not.

3.1 So­cial Media / So­cial Book­marks

So­cial book­marks from LinkedIn, Face­book, Twit­ter, kununu, Xing and You­Tube are in­teg­rated on the ista web­site. So­cial Book­marks are in­ter­net book­marks that allow users of such ser­vices to col­lect links and news mes­sages. These are only in­cluded on the web­site as a link to the cor­res­pond­ing ser­vices. After click­ing on the in­teg­rated graphic you will be for­war­ded to the page of the re­spect­ive pro­vider, i.e. only then will user in­form­a­tion be trans­ferred to the re­spect­ive pro­vider. For in­form­a­tion on the hand­ling of your per­sonal data when using these web­sites, please refer to the re­spect­ive data pro­tec­tion reg­u­la­tions of the pro­vider.

Im­port­ant No­tice: This data pro­tec­tion in­form­a­tion ap­plies ex­clus­ively to ista's in­ter­net ser­vice of­fer­ing. The ista web­site con­tains links to other web­sites. Please note that ista is not re­spons­ible for the data pro­tec­tion or the con­tent of these other in­ter­net ser­vices. We re­com­mend all in­ter­net users to in­form them­selves about the re­spect­ive data pro­tec­tion no­tices of other in­ter­net ser­vices when leav­ing ista's web­site.

4. Data Pro­tec­tion Policy for Ap­plic­ants

In this Data Pro­tec­tion Policy we would like to in­form you about the pro­cessing of per­sonal data as part of the ap­plic­a­tion and/or ap­point­ment pro­ced­ure. In that re­spect in­form­a­tion shall be made avail­able to you about how we com­ply with the valid data pro­tec­tion pro­vi­sions, in par­tic­u­lar the EU Gen­eral Data Pro­tec­tion Reg­u­la­tion (“GDPR”) and the Ger­man Fed­eral Data Pro­tec­tion Act (“BDSG”). We also de­scribe the rights you are en­titled to in ac­cord­ance with Art­icles 15 to 22 GDPR.

Over­view

5. Changes to this data pro­tec­tion in­form­a­tion

ista re­serves the right to amend this dis­clos­ures at any time in com­pli­ance with the ap­plic­able data pro­tec­tion reg­u­la­tions; cur­rent status is July 2024.

If you have any ques­tions re­gard­ing the pro­cessing or se­cur­ity of your per­sonal data, you can con­tact ista’s data pro­tec­tion of­ficer/re­spons­ible dir­ectly.