Privacy

Privacy & Data Protection (EU)
Privacy & Data Protection (DE)

PRIVACY AND DATA PROTECTION (EU)

PURPOSE AND LEGAL BASIS FOR PROCESSING

Data are processed both manually and in electronic form, exclusively for the period of time that is strictly necessary for the accomplishment of the purposes for which data are gathered and in relation to Objectway’s activities.

DATA DERIVED FROM REQUESTS FOR INFORMATION

In case of requests for information received via web or other channels, Objectway processes the provided data with the sole purpose of responding to the request.
Data are processed on the legal basis of fulfilling the data subject’s request.

DATA FROM COMMERCIAL CONTACTS

In the case of commercial contacts and requests for commercial information, Objectway processes data with the sole purpose of being able to contact the individual who has requested the information.
Data are processed on the legal basis of fulfilling the data subject’s request.
For commercial communications, consent is requested to the data subjects and can be withdrawn any time.

NEWSLETTER MAILING LIST AND EVENT PROMOTION

In case of requests to receive the newsletter, Objectway processes the provided data with the sole purpose of sending the newsletter to the indicated address.
Data are processed on the legal basis of fulfilling the data subject’s request. The data subject can always delete its subscription, as reminded in every newsletter.

SUPPLIERS AND PARTNERS

Data from our suppliers and partners may be personal, including telephone numbers, email addresses, and other company information. These data are, in any case, instrumental to the provision of goods and/or services.
Suppliers’ and partners’ data are gathered directly from themselves or from other promotion channels. In the case that personal data are not provided or there is a request to block the processing, the beginning or the continuation of professional relations with Objectway may be impeded.

CUSTOMERS

Data from our clients are of a personal, including telephone numbers, email addresses, and other company information which is, however, instrumental to the provision of goods and services.
Clients’ data are collected directly from them. In case that personal data are not provided or there is a request to block the processing, the beginning or the continuation of professional relations with Objectway may be impeded. Furthermore, please note that Objectway can use the clients’ data without their prior consent to send them promotions of products or services similar to those used by customers. Data subjects can always oppose the purpose as is outlined below.

CURRICULUM VITAE

When receiving a curriculum vitae and during the following interviews, Objectway processes the provided data with the sole purpose of evaluating and selecting candidates for future collaborations.
Data are processed on the legal basis of fulfilling the data subject’s request.

SOCIAL NETWORKS

The company and the social network provider process data derived from social networks jointly as co-controllers. The social network provider independently maintains its privacy policy.
Data from social networks (Facebook, LinkedIn, Youtube, Twitter) are processed using the tools provided by the social network provider itself, which can use cookies or other tracking instruments. These tools can include, but are not limited to: analysis of visits, interactions with other users, forwarding of public messages and other activities supported by the provider.
Data are processed under the consent given by the data subject when signing up, in order to fulfill their requests and for the company’s legitimate interest (tracking its interactions with users, assessing its public image, marketing).
Data are maintained and stored by the social network providers, according to their rules.

COOKIE MANAGEMENT

Complianz Privacy Suite

This website uses Complianz (complianz.io) for Cookie and Data Protection Management, which sets a technically necessary cookie (cmplz_*) to store your cookie consents. Complianz cookie does not process any personal data. The Complianz cookies store the consent you gave when you entered the website. If you wish to revoke these consents, simply delete the Complianz-related cookies in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent.

Cookie Consent Management

To view cookie consent conditions and management terms, visit the Cookie Policy page.

TECHNICAL AND ANALYTICAL COOKIES

Websites www.objectway.com and www.eximiusaas.com install cookies onto users’ terminals to improve the browsing experience (technical cookies), to collect anonymous data regarding the use of the site, and to analyze its service performance (analytics). Some cookies are for profiling and they are described below.
Technical and analytical cookies are supplied by third parties to whom only anonymous data are disclosed. These third parties are indicated below along with the links to their policies:

It is possible to configure consent for the use of cookies by visiting our Cookie Policy page, or by selecting the appropriate settings in your browser; some links for popular browsers are listed below (for other browsers it is recommended to search this option in software help):

It is also possible to manage preferences regarding cookies through services made available to third parties.

DATA RETENTION

Objectway’s goal is to minimize the use of personal data and in this perspective we retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for.

THIRD PARTIES

In some cases, personal data can be communicated to third parties such as but not limited to: payroll companies, audit companies, consultancies companies (legal, administration, fiscal consultancy), banks, mailing services (for newsletters), IT support services for contacts management.
Objectway and its third parties has contractually agreed that data will be processed for the sole purpose of providing the service and that appropriate security and control measures are adopted. Third Parties list is available at Objectway headquarters.
For IT cloud providers, Objectway will preferably use providers based on the European Economic Area. If that would not be possible, Objectway will use providers that are compliant with the current applicable rules and regulations on data transfer outside EU.
All the third parties involved ensure their collaboration with the aim to guarantee the fulfillment of data subject’s rights, the efficacy of incident management and the right to audit.

RIGHTS OF DATA SUBJECTS

Under the Data Protection legislation, data subjects have the following rights with regards to their personal information:

the right to be informed about the collection and the use of their personal data
the right to access personal data and supplementary information
the right to have inaccurate personal data rectified, or completed if it is incomplete
the right to erasure (to be forgotten) in certain circumstances
the right to restrict processing in certain circumstances
the right to data portability, which allows the data subject to obtain and reuse their personal data for their own purposes across different services
the right to object to processing in certain circumstances
the right to complain to the Public Authority

Data subjects can exercise their rights referring to the following contacts

CONTROLLER AND PROCESSORS

The contact details of the Data Controller and the Data Protection Officer (DPO) are available below.
The personal data controller is:
Objectway S.p.A., Via G. Da Procida 24, 20149 Milan, ITALY
Tel: +39 02 898001 – Fax: +39 02 89800285
E-mail: privacy@objectway.it
DPO:
Manuela Marciano
Tel: +39 02 898001 – Fax: +39 02 89800285
E-mail: dpo@objectway.com
The complete list of data processors is available at the controller’s legal headquarters.

COMPLAINTS

Data subjects have the right to raise complaints against Objectway Group through the aforementioned emails or through a claim to the Public Authority.

v.2022/01

Privacy And Data Protection (Germany)

This section provides information, specific for Germany, in accordance with Article 13 and Article 14 of the “EU General Data Protection Regulation (EU-GDPR)”

Details of the responsible organisation

Company:
DIE SOFTWARE Objectway Group GmbH

Legal Representatives:
Karl im Brahm, Dr. Alexander Cassar, Dr. Klaus J. Friese

Address:
Im Klosterbauhof 3, 85560 Ebersberg, Germany

Contact details data protection officer

E‑Mail: datenschutz@die-software.com
Mail: at the above given company address with the addition “Data Protection Officer”

These statements also apply to DIE SOFTWARE BAaS Banking Applications and Services GmbH.

Data concerned:
Personal data is only collected if you provide it to us of your own accord. No other personal data is collected. Any processing of your personal data that goes beyond what is permitted by law will only be carried out on the basis of your express consent.

Purpose of Processing:
Contract processing

Categories of Recipients:
– Public authorities in case of prevailing legal provisions.
– Companies of the Objectway Group.
– External service providers, subcontractors or other contractors.
– Other external bodies, provided the data subject has consented or a transfer is permissible for superior interest.

Transfer to Third Countries:
Contractors outside the European Union may also be used in the context of the fulfillment of the contract.

Duration of Data Storage:
The duration of data storage depends on the statutory retention obligations and is usually 10 years.

Specific information about the website

Data Usage:

When you access our web pages, you transmit data (out of technical necessity) to our web server via your internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

Date and time of the request
Name of the requested file
Page from which the file was requested
Access status (file transferred, file not found, etc.)
Web browser and operating system
complete IP address of the requesting computer
amount of data transferred.

For reasons of technical security, in particular to defend against attempted attacks on our web server, we store this data for a short period of time. It is not possible for us to draw conclusions about individual persons on the basis of this data. The data is later anonymised by shortening the IP address at domain level, so that it is no longer possible to establish a link to the individual user. The data is also processed in anonymised form for statistical purposes; it is not compared with other data or passed on to third parties, not even in extracts.

Use of Google Analytics with the consent of website visitors:

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

Regarding the discussion about the use of analysis tools with complete IP addresses, we would like to point out that this website only uses Google Analytics after prior consent has been granted and with the extension “_anonymizeIp()” and therefore IP addresses are only processed in abbreviated form in order to exclude direct personal reference. Especially for browsers on mobile devices, please click this link to prevent anonymised collection by Google Analytics on this website for your browser in the future by means of a so-called “opt-out cookie”.

Specific information on the application procedure

Data concerned:

Application details

Purpose of processing:

Implementation of application procedure

Categories of recipients:

Public bodies in case of overriding legal provisions.External service providers or other contractors.Other external bodies insofar as the data subject has given consent or a transfer is permissible for overriding interest.

Third country transfers:

No processors outside the European Union are used.

Duration of data storage:

Application data is usually deleted within four months after notification of the decision, unless consent has been given for longer data storage in the context of inclusion in the applicant pool.

Processing of (personal) data by the person responsible for the online application procedure

General
We provide this data protection declaration, which relates exclusively to the data collected as part of the online application process, to inform you about how we handle your personal data collected as part of the application process. In general, personal data is only collected as part of the online application process if you provide it to us of your own accord. No other personal data is collected. Any processing of your personal data that goes beyond the scope of the legal permissions will only be carried out on the basis of your express consent.

Responsible entity

The responsible entity (for all companies of the DSW group of companies) within the meaning of the DS-GVO is:

DIE SOFTWARE Objectway Group GmbH
Im Klosterbauhof 3
85560 Ebersberg
Germany
Phone: +49 (0) 8092 / 86 17 – 0

Commercial Register
Registration number: HRB 101848
Register court: Munich Local Court

Contact details of the data protection officer:

by e‑mail: at datenschutz@die-software.com
by post: at the company address given above with the addition “Data Protection Officer”.

Personal data in the context of the application process

Personal data is information about the personal or factual circumstances of an identified or identifiable natural person. This includes information such as your name, address, telephone number and date of birth, but also data about your specific career, etc., which can be assigned to a specific person with reasonable effort. Information that is not (un)indirectly associated with your real identity, on the other hand, is not personal data.

Personal data concerned

Only personal data that you provide to us as part of the application process will be processed.

Legal basis of processing

We process your personal data in accordance with the regulations of the European General Data Protection Regulation (DS-GVO) and the Federal Data Protection Act (BDSG) for the purpose of deciding on the establishment of an employment relationship. The legal basis for this is Art. 88 DS-GVO in conjunction with § 26 BDSG (new) and, if applicable, Art. 6 Par. 1 lit. b DS-GVO for the initiation or implementation of contractual relationships. Furthermore, we may process personal data about you insofar as this is necessary to fulfil legal obligations (Art. 6 Par. 1 lit. c DS-GVO) or to defend asserted legal claims against us arising from the application process. The legal basis for this is Art. 6 Par. 1 lit. f DS-GVO. If you have given us express consent to process your personal data in accordance with Art. 6 Par. 1 lit. a) DS-GVO, Art. 88 Par. 1 DS-GVO in conjunction with Section 26 Par. 2 BDSG, we will use your data to the extent and for the purpose described in the declaration of consent.

Purposes for processing personal data for applications and in the application process

If you apply to us electronically, i.e. by e‑mail or via our web form, we will collect and process your personal data solely for the purpose of processing the application procedure and carrying out pre-contractual measures. By submitting an application on our recruiting page, you express your interest in taking up employment with us. In this context, you provide us with personal data which we use and store exclusively for the purpose of your job search/application. Since you also have the option of uploading meaningful documents such as a cover letter, your CV and references, these may contain further personal data such as your date of birth, address, etc. Only authorised employees have access to your data. Only authorised employees from the personnel department or employees involved in the application process have access to your data. Personal data is stored exclusively for the purpose of filling the vacant position for which you have applied. Your data will be stored for a period of 90 days beyond the end of the application process. As a rule, this is done to fulfil legal obligations or to defend against any claims arising from legal regulations. We are then obliged to delete or anonymise your data. In this case, the data is only available to us as so-called metadata without direct personal reference for statistical evaluations (for example, proportion of women or men in applications, number of applications per period, etc.).

If you receive an offer of employment with us as part of the application process and accept it, we store the personal data collected as part of the application process for at least the duration of the employment relationship.

Disclosure of data to third parties

The data transmitted as part of your application will be transferred via TLS encryption and stored in a database. This database is operated by Personio GmbH, which offers personnel administration and applicant management software (https://www.personio.de/impressum/). Personio is our order processor in this context in accordance with Art. 28 DS-GVO. The basis for the processing here is a contract for commissioned processing between us as the responsible entity and Personio.

Third country transfers

None.

Your rights

If personal data is processed by us as the responsible entity, you as the data subject have, depending on the legal basis and purpose of the processing, certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), in particular the right to information (Art.15 DS-GVO), right to rectification (Art. 16 DS-GVO), right to erasure (Art. 17 DS-GVO), right to restriction of processing (Art. 18 DS-GVO), right to data portability (Art. 20 DS-GVO), right to object (Art. 21 DS-GVO). If the processing of personal data is based on your consent, you have the right to revoke this consent under data protection law in accordance with Art. 7 III DS-GVO. Please contact our data protection officer to assert your rights with regard to the data processed in this online application procedure (see point 2.). In addition, you have the right to complain to the competent data protection supervisory authority pursuant to Art. 77 DS-GVO if you believe that the processing of personal data collected in the course of your visit to our website violates the General Data Protection Regulation. The Bavarian State Office for Data Protection Supervision (BayLDA) is responsible for us.

Final regulations

We reserve the right to amend this privacy policy at any time to ensure that it always complies with current legal requirements or to reflect changes to the application process or similar. The new data protection statement will then apply to a revisit to this recruitment page or a renewed application.

Specific information on the processing of customer data/prospect data.

Data concerned:

Data provided for the performance of the contract; if applicable, data beyond this for processing based on your explicit consent.

Purpose of processing:

Contract performance, including quotations, orders, sales and invoicing, quality assurance.

Categories of recipients:

Public authorities in case of overriding legal provisions.

External service providers or other contractors, including for data processing and hosting, shipping, transport and logistics, service providers for printing and shipping information and call centres.

Other external bodies insofar as the data subject has given consent or a transfer is permissible for overriding interest.

Third country transfers:

No processors outside the European Union are used.

Duration of data storage:

The duration of data storage depends on the legal retention obligations and is usually 10 years.

Specific information on the processing of employee data

Data concerned:

Data provided for the performance of the contract; if applicable, any additional data for processing based on your explicit consent.

Purpose of processing:

Contract performance within the scope of the employment relationship

Categories of recipients:

Public authorities in the event of overriding legal provisions, e.g. tax office, social security institutions.

External service providers or other contractors, e.g. for data processing and hosting, payroll accounting, travel expense accounting, insurance services.

Other external bodies insofar as the data subject has given consent or a transfer is permissible for predominant interest.

Third country transfers:

No processors outside the European Union are used.

Duration of data storage:

The duration of data storage depends on the statutory retention obligations and is usually 10 years.

Specific information on the processing of supplier data

Data concerned:

Data provided for the performance of the contract; if applicable, any additional data for processing based on your explicit consent.

Purpose of processing:

Contract performance, including enquiries, purchasing, quality assurance.

Categories of recipients:

Public authorities in the case of overriding legal provisions.

External service providers or other contractors, e.g. for data processing and hosting, accounting, payment processing.

Other external bodies insofar as the data subject has given consent or a transfer is permissible for overriding interest.

Third country transfers:

No processors outside the European Union are used.

Duration of data storage:

The duration of data storage depends on the legal retention obligations and is usually 10 years.

Specific information on the use of video conferencing/webinar software.

Data concerned:

Data provided for the use of the video conferencing software or webinar software (esp. first name, last name, e‑mail address; optional: sound transmission; optional: image transmission; optional: questions when using chat functions); to the extent technically necessary, processing of data from your system to establish the connection with the provider of the conferencing software.

Purpose of processing:

Conducting video conferences or webinars.

Categories of recipients:

Public bodies where there is overriding legislation. External service providers or other contractors, including for data processing and hosting. Other external bodies insofar as the data subject has given consent or a transfer is permissible for overriding interest.

Third country transfers:

Processors outside the European Union are used (here: United States of America); standard contractual clauses have been concluded with the service provider accordingly.

Duration of data storage:

A recording of video conferences only takes place with the previously documented consent of the participants. The technical data is deleted if it is no longer required. The duration of data storage otherwise depends on the statutory retention obligations and is usually 10 years.

More information and contacts

In addition, you can assert your rights to information, correction or deletion or to restriction of processing or the exercise of your right to object to processing as well as the right to data portability at any time. Here you will find the possibility to contact us by e‑mail or letter. You also have the right to contact the data protection supervisory authority in the event of complaints.