ngena GmbH attaches great importance to protecting personal data. This privacy notice provides information about the processing of your personal data by ngena if you access the following websites (the “Websites”) operated by ngena: <https://www.ngena.net> and <https://ngena-academy.de> (the “ngena Academy”), in accordance with the requirements of the General Data Protection Regulation (“GDPR”).
2. What data is collected and how is it used?
2.1 Log files
When you visit the Websites, ngena temporarily records the IP address of your device, the name and URL of the requested file, the http response code, the browser and operation system of your device, the time of the visit and the website from which you are visiting. The log files with the recorded data are used for the security purposes, in particular, to protect against attempted attacks on ngena systems, and for statistical analysis (the legal basis for data processing is Art. 6 (1) (f) GDPR). The log files are not used to create individual user profiles and they are deleted after 7 days.
2.2 Cookies: Google Analytics
Th Websites use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on visitors’ computers, to help the website operators analyse how visitors use the site. The information generated by the cookie about the visitors’ use of the Websites will generally be transmitted to and stored by Google on servers in the United States.
On the Websites, IP anonymisation has been activated. The IP addresses of Google users from European Union member states, or from other states contracting to the Agreement on the European Economic Area, will be shortened. Only in exceptional cases will a complete IP address be transferred to a Google server in the United States and shortened there. On behalf of the website operator, Google will use this information for the purpose of evaluating the website for its users, in order to compile reports on website activity, and to provide other services relating to website activity and internet usage for website operators.
Furthermore, users can prevent the collection of data about their use of the Websites (including their IP address) generated by the cookie, and the processing of data by Google, by downloading and installing the browser plug-in through the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
2.3 Communication with ngena
When you send an email to ngena or initiate communication with ngena by other means, ngena will receive your contact data (e.g. an email address), the content of communication and other details that you have voluntary provided (the legal basis for data processing is Art. 6 (1) (a) GDPR). ngena will retain your contact data and details of communication as long as needed to process your inquiries and to respond to you. Of course, you can request ngena to stop processing your data or to delete your data at any time.
If you subscribe to ngena’s blog news alerts, you have to provide your email address to enable ngena to send you the updates (the legal basis for data processing is Art. 6 (1) (a) GDPR). ngena will use your email address to send you company news as long as you are a subscriber. Of course, you can unsubscribe at any time and ngena will delete your data.
If you subscribe to ngena’s press releases and company news, you have to provide your name, your email address and the name of your company. You may also choose to inform ngena about your position. ngena will use your email address to send you company news as long as you are a subscriber, and ngena may use the additional information which you provided in order to select the news which are more relevant to you (the legal basis for data processing is Art. 6 (1) (a) GDPR). Of course, you can unsubscribe at any time and ngena will delete your data.
2.5 ngena Academy
(a) Your account with the ngena Academy: If a company, for which you work, is a registered partner of ngena, then you can set up a user account with the ngena Academy based on your business email address. The account is created after you go through the registration process on the login page of the ngena Academy.
ngena will use your email address to set up a user account on your request so that you can access the ngena Academy (the legal basis for data processing is Art. 6 1 (a) GDPR). Your email address will be stored by ngena as long as you are an active user of the ngena Academy. If you stop being an active user of the ngena Academy (for example, you don’t use the ngena Academy for 90 days), your user account will be deleted. In addition, you can ask ngena to delete your user account and your data at any time.
(c) Log files: the log files on the use of the ngena Academy by registered users are stored for security and user management purposes for a period of 90 days.
3. Will my data be passed on to third parties?
ngena may involve EU-based third-party providers for supporting its IT systems (e.g. hosting providers) and your data may be processed by such providers. Such providers are only involved on the basis of a data processing agreement with ngena which ensures the security and confidentiality of your data. These providers may also be based outside of the EU; non-EU based providers are only involved after the extensive check whether the provider offers the same level of data protection as required by the EU laws, and on the basis of a specific data processing agreement which ensures the same level of data protection as required by the EU laws.
In certain cases ngena may be legally obliged to pass on data on request of a state body.
ngena does not pass on your data to third parties for any other purpose.
4. What rights do I have?
You may request, free of charge, information about your data stored by ngena.
You may request the correction of your data in case the data stored by ngena is incorrect.
You may also request the deletion or restriction of processing of your data, as well as the provision of your data to you or to another controller in a structured machine-readable format.
In addition, you have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for ngena is „Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen” (www.ldi.nrw.de).
5. Data Protection Officer
For specific questions regarding data privacy please contact ngena’s Data Protection Officer, Dr. Herbert Schulz, Hahnstr. 40, 60528 Frankfurt, Germany, gdpr(at)ngena.net.
If you have any general queries, you may contact ngena by post: ngena GmbH, Hahnstr. 40, 60528 Frankfurt, Germany, or by email: info(at)ngena.net.
Last revised: September 2019