Part of the SaaS Subscription Agreement
Privacy Notice
Version 1 · effective
Dieses Dokument liegt ausschließlich in englischer Sprache vor. Die englische Fassung ist die maßgebliche.
Version 1 · Effective as of 21 July 2026
DE software & control GmbH (“DE software & control”) is a provider of services. We’ve developed this Privacy Notice (“Notice”) to explain to you how we collect, use, disclose, and store personal data.
This Notice only applies when DE software & control is the Controller of personal data (example: login information and business-to-business contact data). DE software & control is a Processor, not a Controller, of personal data that we process on behalf of our Customers when they use DE software & control’s products and services. For clarity, this means that this Notice does not apply to where DE software & control processes personal data as a processor in its products and services. If you have questions related to how a DE software & control’s customers utilizes your personal data, please contact them directly. We are not responsible for the privacy or data security practices of our customers.
1. Introduction
Capitalized terms that we use but are not defined in the Notice have the meaning provided in the Agreement.
When Does This Notice Apply? This Notice only applies to personal data that DE software & control handles as a Controller (meaning where DE software & control controls how and why your personal data is processed). This includes when you:
- Provide login details to log into our platform and inquire about or engage in commercial transactions with us.
Changes: We may update this Notice from time to time. Please check back periodically for updates. If you do not agree with any changes we make, you should stop interacting with us. When required under applicable law, we will notify you of any changes to this Notice by posting an update on our Platform or in another appropriate manner.
2. Personal Data We Collect and Disclose
The below table describes what personal data we collect about you and to whom we disclose personal data.
| Categories of Personal Data Collected | Disclosures of Personal Data |
|---|---|
| Identifiers, such as your name, email address, postal address, phone number. | Service providers, such as security and platform vendors; with third parties that are necessary to complete a transaction, such as credit card processors; business partners who we partner with to jointly market or sell our products and Services, such as channel partners; with third parties at your direction, such as event sponsors; professional advisors, such as lawyers, accountants, and auditors; entities involved in a corporate transaction, including if we sell, acquire, or merge all or some of our assets; companies that operate Cookies and Tracking Technologies, described in Section 5, such as marketing and advertising partners; to which you have consented to the disclosure. |
| Commercial information, including preferences, such as purchasing history or tendencies and transactional information, such as banking information. | Service providers, such as security and platform vendors; with third parties that are necessary to complete a transaction, such as credit card or other payment processors; professional advisors, such as lawyers, accountants, and auditors; entities involved in a corporate transaction, including if we sell, acquire, or merge all or some of our assets; to which you have consented to the disclosure. |
| Internet or other electronic network activity information and device information, such as your browsing history, search history, device information, and other information (whether passive browsing or active engagement) regarding your interactions with us and use of our products, Services, emails, and other digital properties. | Service providers, such as security and platform vendors; companies that operate Cookies and Tracking Technologies; entities involved in a corporate transaction, including if we sell, acquire, or merge all or some of our assets. |
| Geolocation information, such as approximate location based on your IP address, mobile device location, or information you provide to us (such as city and state you provide through a webform). You may be able to control collection of this data through the settings of your device. | Service providers, such as security and platform vendors; entities involved in a corporate transaction, including if we sell, acquire, or merge all or some of our assets; companies that operate Cookies and Tracking Technologies, described in Section 5, such as marketing and advertising partners. |
3. How We Process Personal Data
We may process your personal data for the below purposes:
| Purpose of Processing | Lawful Basis |
|---|---|
| To provide our products, Services, and Digital Properties to you, including processing and fulfilling transactions; enabling you to access the digital properties and our Services; operating, maintaining, and improving our digital properties and Services; communicating with you, such as by completing your support requests or providing security updates; and diagnosing, repairing, and tracking service and quality issues. | Legitimate interests; Contract; Legal obligations |
| For our own business purposes, including maintaining internal business records and conducting internal reporting; collecting payments and performing accounting and similar business functions; auditing and managing projects related to our Services; performing IT security management and IT-related tasks, such as administration of our technologies and network; evaluating and improving our business, Services, and digital properties; and performing research and development of new products and services; and processing your survey and questionnaire responses. | Legitimate interests; Legal obligations |
| For legal, safety, or security reasons, including to comply with legal requirements; establish, exercise, or defend against legal claims; protect the safety, security, and integrity of our property and the rights of those who interact with us or others; investigate any content or conduct policy violations; and detect, prevent, and respond to security incidents or other malicious, deceptive, fraudulent, or illegal activity. These safety purposes may also involve collecting and processing special categories of personal data (i.e., health data), for office visits and events where necessary for public health or as required by applicable law. | Legitimate interests; Legal obligations; Public interest |
| For marketing our products and Services or those of third parties, such as our business partners, including to solicit or publish testimonials or feedback about our products and Services; send you marketing and promotional communications or product recommendations (via email, phone, or other online and offline channels) about our Services or those of third parties; facilitate your participation in a contest or event; assess ad impressions or engage in contextual ad customization. For further information, please see Section 5 below. | Consent (where required by law); Legitimate interests |
| When you have voluntarily agreed to have your personal data processed. | Consent |
DE software & control will honor data subject rights to the extent required by law. You may have the right to access, correct, update, and, in some cases, request deletion of your personal data (subject to exceptions). You may submit a request to: dsb@de-gmbh.com.
DE software & control uses a limited number of third-party service providers to assist us in processing data for certain purposes. These third-party providers help support certain site features, perform database monitoring and other technical operations, assist with the transmission of data, and provide data storage services. These third parties may process or store personal data while providing their services. DE software & control maintains contracts with these third parties restricting their access, use and disclosure of personal data in compliance with our obligations under applicable laws and privacy certifications described more fully below.
4. Sources of Personal Data
- Information you provide to us directly, including when you register and communicate with us directly through our digital properties, visit our offices, or participate in our events, marketing, and outreach activities.
- Information collected from your employer, coworkers, or friends, including information about representatives or other employees of our current, past, and prospective customers, suppliers, investors, and business partners. We may also receive your information from a friend as part of a referral for our Services.
- Information automatically collected, including technical information about your interactions with our platform (such as IP address, browsing preferences, and purchase history). More information is available in Section 5 below.
- Information from public sources, including information from public records and information you share in public forums, such as social media.
- Information from other third parties, including information from third-party service and content providers, entities with whom we partner to sell or promote products and services, and social media networks (including widgets related to such networks).
We may combine information that we receive from the various sources described in this Notice, including third-party sources and public sources, and use or disclose it for the purposes identified above.
5. Cookies and Tracking Technologies
We use cookies and other tracking technologies and offer you the option to manage these settings as described in our Cookie Notice. Some tracking technologies enable us to track your device activity over time and across devices and websites. While some browsers have incorporated Do Not Track or DNT preferences, we do not honor such signals from web browsers at this time.
6. Security and Retention
We maintain appropriate security procedures and technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, disclosure, alteration, or use.
Your personal data will be generally retained as long as necessary to fulfill the purposes for which we collected the personal data. Once you and/or your company have terminated the contractual relationship with us or otherwise ended your relationship with us, we may retain your personal data in our systems and records to ensure adequate fulfillment of surviving provisions in terminated contracts or for other legitimate business purposes, such as to evidence our business practices and contractual obligations, to provide you with information about our products and services, or to comply with applicable legal, tax, or accounting requirements. When we have no ongoing legitimate business need nor lawful legal ground to process your personal data, we will delete, anonymize, or aggregate it or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible. If you want to know more about retention periods applicable to your particular circumstance, please contact us using the details provided in Section 9 below.
7. Children’s Privacy
Our Platform and Services are not directed to children under the age of 18, and we do not knowingly collect online personal data directly from children. If you are a parent or guardian of a minor child and believe that the child has disclosed online personal data to us, please contact us using the details provided in Section 9 below.
8. External Links
When interacting with us, you may encounter links to external sites or other online services. We do not control and are not responsible for privacy and data collection policies for such third-party sites and services. You should consult such third parties and their respective privacy notices for more information or if you have any questions about their practices.
9. Contact Information
If you have questions or complaints regarding this Notice or about the DE software & control’s privacy practices, please contact us at:
DE software & control GmbH Mengkofener Straße 21 D-84130 Dingolfing Telephone: +49 8731 3797 0 Email: info@de-gmbh.com
10. GDPR
The following terms supplement the Notice with respect to our processing of EEA (i.e., European Union Member States, Iceland, Liechtenstein, and Norway) personal data. In the event of any conflict or inconsistency between the other parts of the Notice and the terms of this Section 10, Section 10 shall govern and prevail with regard to the processing of EEA Personal Data, to the extent applicable.
Data Controller: DE software & control is the controller within the scope of this Notice.
a. Legal Basis for Processing
Please see Section 3 for the legal basis on which we rely for the collection, processing, and use of personal data.
b. Your Data Protection Rights
Under applicable data protection laws, you may exercise certain rights regarding your personal data:
- Right to Access. You have the right to obtain confirmation from us whether we are processing your personal data and related information, as well as the right to obtain a copy of your personal data undergoing processing.
- Right to Data Portability. You may receive your personal data, that you have provided to us, in a structured, commonly-used, and machine-readable format, and you may have the right to transmit it to other data controllers without hindrance. This right only exists if the processing is based on your consent or a contract, and the processing is carried out by automated means.
- Right to Rectification. You have the right to request the rectification of inaccurate personal data and to have incomplete data completed.
- Right to Objection. You have the right to object to the processing of your personal data in certain cases.
- Right to Restrict Processing. You may request that we restrict the processing of your personal data in certain cases.
- Right to Erasure. You may request that we erase your personal data in certain cases.
- Right to Lodge a Complaint. You have the right to lodge a complaint with a supervisory authority.
- Right to Refuse or Withdraw Consent. In case we ask for your consent to process your personal data, you are free to refuse to give it. If you have given your consent, you may withdraw it at any time without any adverse consequences. The lawfulness of any processing of your personal data that occurred prior to the withdrawal of your consent will not be affected.
- Right to Not Be Subject to Automated Decision-making. The types of automated decision-making referred to in Article 22(1) and (4) EU/UK General Data Protection Regulation (“GDPR”) do not take place in connection with your personal data. Should this change, we will inform you about why and how any such decision was made, the significance of it, and the possible consequences of it. You will also have the right to human intervention, to express your point of view, and to contest the decision.
You may exercise these rights by contacting us using the details provided in Section 9 above. Please note that we may refuse to act on requests to exercise data protection rights in certain cases, such as where providing access might infringe someone else’s privacy rights or impact our legal obligations.
In the context of onward transfers, DE software & control is accountable for the processing of personal data it receives under the Principles and subsequently transfers to a third party acting as an agent on its behalf. DE software & control remains liable under the Principles if DE software & control’s agent processes personal data in a manner inconsistent with the Principles, unless DE software & control proves that it is not responsible for the event giving rise to damage.
Data Protection Officer: The contact details for our data protection officer are as follows: DE software & control, Ramona Höfler, Phone: +49 8505 91927-15, Email: dsb@de-gmbh.com