Proteção de dados

This data protection notice pursuant to Art. 13 ff. GDPR fulfills our obligation to provide information about the collection of personal data on our website.
As a general rule, Tebis operates multiple websites, including but not limited to tebis.com, info.tebis.com or tebis-consulting.com (referred to in the following as “the websites”, “our websites”) and would like to inform you in the following sections of the present data protection notice about, among other things, the extent to which your personal information will be processed by the websites and the purposes for which this information will be used.

1. Name and contact data of the controller:

Tebis Technische Informationssysteme AG
represented by the Management Board
Einsteinstr. 39
82152 Martinsried/Planegg (referred to in the following as “Tebis”, “we”, “us”).

2. Contact data of the Data Protection Officer:

Holzhofer Consulting GmbH
Martin Holzhofer
Lochhamer Str. 31
82152 Planegg, Germany
Phone: (0 89) 1 25 01 56 00
Email: datenschutzbeauftragter-tebis@holzhofer-consulting.de

3. Purposes for which personal data are processed and the legal basis for processing: 3.1. Processing of access dataFor technical reasons, we will process a limited quantity of data (so-called connection data) every time you access our websites. These data are technically required to establish and carry out a connection between your terminal device and our servers. These data will be processed in the main memory of the web server for the duration of the connection:

The following data or categories of data will be collected:

IP address
Source port of the accessing device or gateway (e.g., firewall or proxy)
Time stamp (date and time) of access
Data quantity transferred
Report as to whether the access was successful (by way of HTTP error code)
Report as to why an access failed, applicable (by way of HTTP error code)
Referer (website from which our main page or subpages were accessed)
User agent (type and version of browser with which you access our website)
Width and height of the display screen
Language settings of your browser
Only when using the AI agent (see Section 3.9)

The IP address, time stamp, HTTP error code, referer and user agent will be logged automatically when you access our websites in order to ensure the functionality and protection of our websites. The logs also serve the purpose of optimizing the website. You IP address will be processed further only in truncated form, by which it is anonymized. It is impossible for us to generate personally identifiable user profiles with these data.

The processing is done on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Based on a weighing of interests, it has been concluded that the processing is necessary for the purposes of our legitimate interests, which override your interests and fundamental rights and freedoms which require protection of your personal data.

3.2 Cookies and related technologies3.2.1 General information
This website uses so-called cookies and related technologies (e.g., scripts) in part. Cookies cause no damage to your computer and contain no viruses. Cookies serve the purpose of making our websites more user-friendly, more effective and more secure. Cookies are small text files which are stored on your terminal device and which your browser saves, including for the purpose of “remembering” information about you such as your language settings or log-in information. These cookies are placed by us in part and are referred to as first-party cookies. We also use third-party cookies, which originate from a different domain from that of the website you visited.

As a general rule, we categorize cookies as follows:

Technically necessary cookies
Preference cookies
Statistical cookies
Marketing cookies

You can find additional information about the individual categories and the chance to reject each cookie category (with the exception of technically necessary cookies), as well as a list of all cookies used, under “Cookie settings”.

3.2.2. Technically necessary cookies
Most of the cookies we use are so-called “session cookies”. They are automatically erased at the end of your visit. Such cookies are technically necessary to operate the website and to provide the service desired by the user and can therefore not be deactivated.
Processing is performed on the basis of a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Based on a weighing of interests, it has been concluded that the processing is necessary for the purposes of our legitimate interests, which override your interests and fundamental rights and freedoms which require protection of your personal data.

3.2.3 Cookies requiring your consent, such as analysis and tracking cookies and related technologies (e.g., tracking scripts)
Advertising, marketing and analysis tools of third-party providers are additionally integrated into our website. These tools are not technically necessary to operate the website, but serve the purpose, for example, of gathering information about the user’s behavior, displaying certain advertising to the user on the basis of this information, or analyzing the use of our website (e.g., Google Analytics, DoubleClick by Google, LinkedIn Ads and LinkedIn Analytics).
These services are only activated after you have expressly granted your consent with the aid of the consent banner.

An overview of all third-party services integrated into the website and detailed information about each one of these services can be found in Article 10.

3.3 Data processing in connection with our contact form When you contact Tebis using the contact form on the website, the information your enter will only be used, as a general rule, for the purpose of processing and answering your request and for possible follow-up questions and further advice, where applicable (insofar as you do not wish to subscribe to the newsletter at the same time by checking the corresponding checkbox).

The following data or categories of data will be collected and processed:

Form of address
Last name
Email address
Name of your company
Country
Contact reason

In addition, you can provide the following information on a voluntary basis:

First name
Telephone number
Postal code
City

The legal basis for processing your data is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Based on a weighing of interests, it has been concluded that the interests of the data subjects do not override our interests in processing. In the present case, we have a legitimate interest in answering your request, for the purpose of which it is necessary to process the data and categories of data mentioned here.

3.4 Data processing in connection with newsletter subscriptionIf you wish to receive information about new products or other interest topics on a regular basis, Tebis offers you the chance to receive a newsletter.
You can subscribe to our newsletter by checking the corresponding checkbox below the various forms (e.g., contact form, registration for training courses, or registration for events) or by subscribing directly at https://www.tebis.com/de/immer-auf-dem-laufenden. You will then receive an activation link at the email address you indicated, which you must click to complete the subscription (double opt-in procedure).

Your subscription to the newsletter is not activated until you click the confirmation link. This enables us to prevent the abuse of your personal data by third parties.

The following data or categories of data will be collected and processed:

Form of address
Last name
Email address
Name of your company
Country

In addition, you can provide the following information on a voluntary basis:

First name

The legal basis for processing is Art. 6 para. 1 lit. a GDPR, thus your express and voluntary consent in combination with the double opt-in procedure.

You can revoke your consent at any time for any reason. Two options are available to you for this purpose:
You can click on the “Unsubscribe” button appearing in every newsletter in order not to receive the newsletter in the future.
You can also send an informal mail with your request to unsubscribe to tebisworld@tebis.com or info@tebis.com.

3.5 Data processing in connection with registration for eventsYou can also register for various events on our website (e.g., the Annual Tebis Open House).
In order to complete the registration and plan the event, we require the following data or categories of data from you:

Form of address
Last name, first name
Email address
Name of your company
Position
Street address
Postal code
City
Telephone number
Country

Form of address
Last name, first name
Email address
Job title
Name of your company
Street address
Postal code
City
Telephone number
Country

Unless you wish to register for the newsletter at the same time by checking the corresponding checkbox, the data collected in the registration will be processed exclusively for the purpose of performing the registration and planning of the corresponding event (e.g., training course, seminar, webinar). The legal basis for processing your data is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Based on a weighing of interests, it has been concluded that the interests of the data subjects do not override our interests in processing. In this case, we have a legitimate interest in holding and planning training courses, seminars and webinars, for which purpose the registration process and the related processing of the data and categories of data mentioned here are necessary.

Additional notice regarding webinars: Webinars serve the purpose of communication between Tebis Technische Informationssysteme AG and a group of persons who register for a digital conference to obtain information online. If you register for a webinar, the following data are absolutely necessary to support the procedure: Last name, first name, and email address. In order to offer the “webinar” service, Tebis Technische Informationssysteme AG utilizes the GoToWebinar service of the company LogMeIn, LogMeIn Ireland Limited Bloodstone Building Block C 70, Sir John Rogerson’s Quay Dublin 2, Ireland. (Data protection statement: 3.7 Consent to the production and use of photographs, video or audio recordings and personal data in accordance with Art. 6 para. 1 lit. a GDPR, Section 22 KunstUrhG With your registration for in-person events or online webinars organized by us, such as the Tebis Open House, photographs, video and audio recordings will be produced and you consent to the processing of your personal data for the purpose of publication, free of charge, in: - Press releases - Social media such as Facebook, Instagram, XING, LinkedIn, YouTube, Twitter, etc. - Online media such as intranet and Internet - Various printed materials .
Before publishing such photographical materials, Tebis AG will ask for your consent as long as you are not to be seen only as part of larger group of persons.
You consent to your personal data being forwarded to service providers (print shops, social media providers, etc.) for processing your data.

You can revoke this consent with effect in the future at any time for any reason. This revocation can be sent by email to info@tebis.com or by mail to Tebis Technische Informationssysteme AG, Einsteinstr. 39, 82152 Martinsried/Planegg, Germany.

Your photographs, video or audio recordings will no longer be used for the above-mentioned purposes starting from the date of receipt of your revocation. Your photographs, video and audio recordings will be stored until you revoke your consent, but not for longer than necessary for the intended purpose.
Please be advised that recordings used on the Internet or social media can no longer be deleted retrospectively.
Already printed and distributed printed materials (e.g., printed media) or an image file cannot be withdrawn.

3.8 Data processing for the purpose of precontractual steps with prospective customersOur offering is aimed exclusively at entrepreneurs, tradespeople, freelancers and public-sector institutions. Contracts with consumers pursuant to Section 13 BGB are not concluded.
If you are interested in the goods and services offered on the website, we will process and store the information you provide when contacting us by using our contact form. All other information required to fulfill the obligation to provide information about these processing activities pursuant to Art. 13 ff. GDPR can be found in the data protection notice.

3.9 Data processing when using the AI agent Agentforce from Salesforce

The present information pursuant to Art. 13 ff. GDPR on data protection serves to fulfill the duty to inform when personal data is collected in conjunction with the use of the AI-based assistant Agentforce from Salesforce.

Purposes for which personal data is processed and the legal basis for processing:
An AI-based assistant (Agentforce from Salesforce) is available on the website www.tebis.com to assist you. The entries you make are processed to provide you with relevant information:

Assistance in using the website
Improvement of the user experience
Assistance with navigation and information retrieval
Information on events and trade fairs
Information on professional training offerings
Connection to contact persons
Advice on products and features

The following data or data categories are collected and processed:

Your chat entries (chat history)
Usage data (e.g., time, duration, interaction history)
IP address

Your data is processed on the basis of our legitimate interest in efficient customer communication (Art. 6 para. 1 lit. a GDPR). A balancing of interests was carried out; the conclusion was that the processing is necessary to protect our legitimate interests, and that these outweigh your interests, fundamental rights, and fundamental freedoms that require the protection of personal data.

Data transfer to a third country:
When the AI-based assistant is used, personal data is currently transferred to third countries in the following cases:

Transfer of data to Salesforce Inc., Salesforce Tower 415, Mission Street, 3rd Floor, San Francisco, CA 94105, USA, in conjunction with the use of Salesforce Agentforce.

An adequacy decision adopted by the EU Commission within the meaning of Art. 45 para. 3 GDPR, which also extends to the EU-US Data Privacy Framework (DPF), exists for the United States. By virtue of this decision, the level of data protection for data exports to recipients in the United States that are certified under the DPF is deemed to be adequate. Because the service provider Salesforce is certified under the DPF, it is obligated to follow European data protection principles.

Recipients of data:
For the processing of personal data for the purposes stated here, we use the following recipients as processors within the meaning of Art. 28 GDPR:

Provider of the AI system (Salesforce)

This is done solely on the basis of a data processing agreement, whereby the service provider processes your personal data on our behalf and on the basis of our instructions and is contractually obliged to comply with applicable data protection laws.
Further recipients are affiliated companies of Tebis AG. As an internationally active company, we may therefore pass on your data to the following affiliated companies:

Tebis ProLeiS GmbH
DCAM GmbH

A transfer to third parties for other purposes does not take place.

Data sources:
We process only the personal data that we have received in connection with your entries in the AI-based assistant.

Duration of storage and criteria for determining the duration:
Personal data is stored only for as long as is necessary to fulfill the purposes stated here or as required by the retention periods specified by law. Once the respective purpose no longer applies or the retention periods have expired, the data is deleted in accordance with the statutory provisions.

Your data is therefore stored only for as long as is necessary to process your inquiry or is required by the statutory retention periods. Personal data collected in connection with an inquiry (in particular, data in the chat history) is generally anonymized 4 weeks after the inquiry has been concluded.

Automated decision making:
The AI assistant makes no decisions with legal effect or other significant influence within the meaning of Art. 22 para. 1 and 4 GDPR. All responses are solely for assistance and can be reviewed by our Salesforce administrators at any time.

Your data subject rights:
You have the right to access, rectification, erasure, restriction of processing, objection, and data portability pursuant to Art. 15–21 GDPR.

If you wish to exercise your rights as a data subject, please address your request to:

Tebis Technische Informationssysteme AG
Einsteinstr. 39
82152 Martinsried/Planegg
Germany
Email: webmaster@tebis.com

In addition, you may file a complaint with a supervisory authority at any time pursuant to Art. 77 para. 1 GDPR. Generally speaking, the supervisory authority with jurisdiction over us is:
Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Postfach 1349, 91504 Ansbach, Germany, Email: poststelle@lda.bayern.de, Telephone: +49 (0) 981 180093-0.
Alternatively, you can contact the supervisory authority that has jurisdiction over your area.

4. Automated decision making, including profiling Tebis AG does not engage in automated individual decision making, including profiling, according to Art. 22 paras. 1 and 4 GDPR.

5. Transfer of data to a third country Data transfers to countries outside of the EU and the European Economic Area (“third countries”) are done for purposes of the administration, development and operation of IT systems. Such transfers are only done on the basis of:

An adequacy decision of the European Commission within the meaning of Art. 45 GDPR.
a certification mechanism pursuant to Art. 42 GDPR, together with legally binding and enforceable obligations of the controller or the processor in the third country.
Standard data protection clauses issued by the Commission in accordance with the committee procedure pursuant to Art. 93 para. 2 GDPR.

At the present time, transfers of personal data to third countries, particularly to the United States, in connection with the use of our website are done through the use of third-party services in the following cases:

Transfer of data to Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
Transfer of data to LinkedIn Corp., 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.
Transfer of data to Vimeo Inc., 555 West 18th Street New York, NY 10011, USA.
Transfer of data to Salesforce Pardot LLC, 950 East Paces Ferry Rd NE #2800, Atlanta, GA 30326, USA.
Transfer of data to Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Transfer of data to New Relic Inc., 188 Spear St., Suite 1000. San Francisco, CA USA 94105.
Transfer of data to Wingify Software Private Limited, LJ TOWER, 1104, North, Netaji Subhash Place, Pitam Pura, Delhi, 110034, India.
Microsoft Advertising (ehemals Bing Ads) der Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. The data controller in the EU is Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Irland.

The websites and logs are stored exclusively on servers in Germany.

6. Categories of data recipients For processing personal data for the purposes indicated herein, we utilize the following categories of data recipients as controllers within the meaning of Art. 28 GDPR:

Providers of servers for the purpose of hosting our websites
IT service providers to maintain our IT infrastructure
External service providers for additional services
Providers of marketing and analysis services (e.g., Google, LinkedIn, Salesforce/Pardot)

Data protection notice for the use of our website