Privacy policy

I. General Information

1. Important Terms

This Privacy Policy uses various terms defined according to the General Data Protection Regulation (GDPR). "Personal data" refers to information about an identified or identifiable natural person. "Processing" includes any operation related to personal data, such as collection, storage, modification, or deletion. The "Controller" is the person or entity that decides on the purposes and means of processing personal data. Other important terms used in this Privacy Policy include "Processor", "Consent," and "Data Subject."

2. Scope

This Privacy Policy applies to all personal data processed by us as the Controller. It covers data that we collect and process from both our customers and users of our website and our services. The Privacy Policy informs you about the nature, extent, and purposes of the collection and processing of personal data by our company and your rights as a data subject. It applies regardless of whether you use our services via a website, an app, in social networks, or as part of other services and features that we offer.

3. Controller

The Controller responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is Dariyousch Käther, c/o COCENTER, Koppoldstraße 1, 86551 Aichach, Germany, privacy@howt.io. For more information about our company, the legal basis of our data processing, and our partners, you can refer to our legal notice, which is available on our website.

4. Data Protection Officer

Currently, no data protection officer is appointed. For questions regarding data protection, please contact our Controller.

5. Updates to the Privacy Policy

We reserve the right to revise or update this Privacy Policy from time to time to reflect changes in our data processing practices or changes in legal requirements. The current version of the Privacy Policy will be published on our website. We recommend that you regularly review it to stay up to date. Significant changes that affect your rights and freedoms regarding the processing of your personal data will additionally be communicated to you via email or other communication channels, provided you have given us the relevant contact details.

II. Detailed Data Processing

1. General Information on Data Processing

We take the protection of your personal data very seriously. Your personal data is treated confidentially and processed in accordance with the legal data protection regulations and this Privacy Policy. The use of our website is generally possible without providing personal data. As far as personal data (such as name, residence, or email addresses) is collected on our pages, this is done, as far as possible, on a voluntary basis. These data will not be passed on to third parties without your explicit consent.

2. Data Transfer to Third Countries

As part of our digital services, we use cloud infrastructures and Content Delivery Networks (CDNs) that are partly operated outside the European Economic Area (EEA). In particular, we use services from Amazon AWS and Hetzner with server locations in the EU, mainly in Frankfurt am Main. However, for the provision of our services via CDNs, international edge locations may also be used. This is necessary to ensure high availability and performance of our software. We take appropriate protective measures to ensure an adequate level of data protection and comply with the legal provisions for international data transfer. The transfer is carried out observing the required security standards and in compliance with contractual arrangements that ensure the protection of your personal data, such as Standard Contractual Clauses approved by the European Commission. For more information on the protective measures we use when transferring your data to third countries, you can refer to our Privacy Policy or inquire directly with us.

3. Data Collection When Visiting Our Website

When you visit our website for information purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security: IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred, website from which the request comes, browser, operating system and its interface, as well as the language and version of the browser software.

4. Data Collection Upon Contact

When you contact us via email, telephone, or a contact form, the information you provide will be stored for the purpose of processing the request and for possible follow-up questions. This data is not passed on without your consent. The processing of this data is based on your consent or, if it relates to contractual or pre-contractual measures, to fulfill our contractual obligations. The data processing is carried out here according to Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest.

5. Data Collection for Callback Service and Appointment Scheduling

When you use a callback service or online appointment scheduling, we collect the necessary personal data, such as your name, telephone number, and, if applicable, your email address. These data are used exclusively for handling the callback service or appointment scheduling and are deleted after these purposes are fulfilled, unless there are legal retention obligations. The processing of this data is based on your consent or for the execution of pre-contractual measures.

6. Data Collection When Using Web Software

When using our web software, personal data is processed to enable you to use the software. This includes data necessary for creating and managing your user account, such as your name, email address, and possibly payment information. Furthermore, usage data is collected, which is necessary for providing and improving the functionality of the software. The processing of this data is carried out to fulfill the contract between you and us or for the execution of pre-contractual measures.

7. Data Collection When Using Desktop Software

When using our desktop software, we collect and process personal data to provide you with the full functionality of the software. This includes the collection of information such as username, email address, and if necessary, payment data for subscription services or additional features. In addition, usage data and technical data may be collected to ensure software performance and for troubleshooting. The processing of this data is carried out to fulfill the license agreement between you and us.

8. Data Collection for User Accounts

For creating a user account on our platform, we collect personal information such as your name, email address, and a password of your choice. These data are necessary to grant you access to your account and our services and to enable secure and personalized use. The processing of these data is based on your consent or, if the user account is necessary for the fulfillment of a contract or for carrying out pre-contractual measures, on this legal basis.

9. Data Collection When Sharing Documents

When you share documents via our platform, personal data such as the name of the document creator or recipient and the email address may be processed. These data are necessary to enable the sharing of documents and to grant the recipients the corresponding access. The data processing is based on your consent or, if sharing documents is necessary for the fulfillment of a contract or for carrying out pre-contractual measures, on this legal basis.

10. Data Processing for Marketing and Advertising Purposes

We also use your data to inform you about our products, services, and offers. This includes sending newsletters, promotional emails, or postal advertising, provided you have consented to this type of use of your data. You can revoke your consent at any time. The processing for marketing purposes is based on your consent or, as far as legally permitted, within the scope of our legitimate interest in direct marketing.

11. Data Processing in Surveys

If you participate in one of our surveys, we use your data for evaluation and improvement of our services and offers. Participation in such surveys is voluntary, and your data will be processed anonymously unless otherwise stated. The data processing is based on your consent or our legitimate interest in improving our services and offers.

12. Data Processing in Contests and Promotions

If you participate in one of our contests or promotions, we process your data for the purpose of conducting the contest, particularly for determining winners and awarding prizes. Your data may also be used for marketing purposes if you have consented to this. The terms and conditions and privacy notices of the respective contest or promotion contain detailed information about the processing of your data. The processing is based on your consent or for conducting the contest.

13. Data Processing for Press Distribution List

If you sign up for our press distribution list, we process your contact details, such as name and email address, to send you press releases and information about our company. Subscription to the press distribution list is voluntary, and you can unsubscribe at any time. The processing of this data is based on your consent or our legitimate interest in informing the public and media representatives about news and developments in our company.

14. Handling Applicant Data

If you apply for a position with us, we process your application data exclusively for the purpose of managing the application process. This includes contact details, resume, certificates, and all other data you provide us with as part of your application. The processing of this data is for carrying out pre-contractual measures that occur upon your request, and due to our legitimate interest in finding qualified candidates for our company.

15. Handling Requests from Data Subjects

If you, as a data subject, make requests regarding your personal data, e.g., for access, correction, deletion, or restriction of processing, we will process your requests in accordance with the legal provisions. Your requests are carefully examined by us and processed in accordance with the legal requirements. For processing these requests, your contact details and the data related to the request are processed in order to clarify and respond to your concern.

16. Tracking & User Analysis

We use tracking technologies on our website to analyze the usage behavior of our visitors and to optimize our website accordingly. This processing is either based on your consent or on our legitimate interest in improving the functionality and user-friendliness of our website as well as the effectiveness of our online marketing measures. You have the right to object to such processing. Detailed information about the tracking technologies used, their functioning, and your options to object can be found in our Cookie Policy.

17. Tools and Miscellaneous

On our website and in our desktop and web software, we use various tools from third-party providers to offer additional features and make our services more efficient. These tools may process personal data, such as IP addresses or usage data. The processing of such data is either based on your consent or our legitimate interest in optimizing and securing our services. Detailed information about each tool, the processed data, and your rights and options for settings can also be found in our Cookie Policy and in the section on third-party tools in this Privacy Policy.

Data Retention Period

The duration for which we store your personal data depends on the respective purpose for which the data is processed, as well as any applicable legal retention periods. In general, we retain personal data only as long as it is necessary for the fulfillment of the purpose for which it was collected, or as prescribed by legal regulations. For example, data collected in the context of contractual relationships is typically stored until the end of the contractual relationship and thereafter in accordance with legal retention periods. Data collected for other purposes, such as data from contact inquiries or newsletter subscriptions, is deleted as soon as it is no longer needed and there are no legal retention obligations. If specific information on the retention period for certain types of data is required, these will be explained separately in the respective sections of this Privacy Policy.

III. Rights of Data Subjects

1. Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

2. Right of Access

You have the right to obtain confirmation as to whether or not personal data concerning you is being processed. If this is the case, you have the right to access this personal data and other information as listed in Art. 15 GDPR.

3. Right to Rectification

You have the right to obtain the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

4. Right to Erasure ("Right to be Forgotten")

You have the right to obtain the erasure of personal data concerning you without undue delay where one of the grounds listed in Art. 17 GDPR applies, e.g., if the data is no longer necessary for the pursued purposes. This does not apply if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

5. Right to Restriction of Processing

You have the right to obtain the restriction of processing of your personal data if one of the conditions listed in Art. 18 GDPR applies, e.g., if you contest the accuracy of the personal data or have objected to the processing. In this case, we may only process the data, apart from storing it, with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person.

6. Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, as long as the processing is based on consent pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR, and the processing is carried out by automated means.

7. Right to Withdraw Consent

You have the right to withdraw consent to the processing of personal data at any time. This applies to consent for the processing of specific data or for specific processing operations. However, the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Upon receipt of the withdrawal, we will stop the corresponding data processing unless there is another legal basis for further processing.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. You can exercise this right particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR. The complaint with the supervisory authority is without prejudice to other administrative or judicial remedies.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to enhance your user experience, make the website more efficient, and tailor our services. Cookies are small text files that are stored on your device when you visit our website. They help us understand how our website is used, enable a personalized user experience, and can contribute to making your interaction with our website faster and more secure.

We use both session cookies, which are deleted after you close your browser, and persistent cookies, which remain on your device for a longer period. Our website may also use similar technologies such as Local Storage, IndexedDB, or Web SQL to store and retrieve information in your browser or device.

You have the option to manage your cookie settings in your browser. You can disable or delete cookies completely or partially. However, please note that disabling cookies may impair the functionality of our website and restrict your access to certain features.

A detailed list of the cookies we use and the purpose of their use is listed separately. For more information about managing your cookie settings and protecting your privacy, please visit the help page of your browser or contact us directly.

Cookie Details

Third-Party Tools

On our website, we use various tools and services from third parties to provide additional features and enhance the user experience. These may include, but are not limited to, analytics tools, social media plugins, map and video services. When using these tools, personal data such as IP addresses or browser information may be processed and transferred to the servers of the third parties, which may also be located outside the EU. We carefully select our third-party providers and ensure that an adequate level of data protection is maintained. The use of these tools is based on your consent or our legitimate interest in making our website functional and informative. For detailed information about the third-party tools used, the type of data processed, and your rights and settings options, please refer to the specific sections of our Privacy Policy and our Cookie Policy.

Use of Analytics Tools

Our website uses analytics tools such as Google Analytics to understand user behavior on our website and improve our services accordingly. These tools collect information such as the number of visitors, the pages they visit, and other relevant statistics. The information generated by the cookie about your use of this website is usually transmitted to and stored on a Google server in the USA. We use Google Analytics with the "anonymizeIP" extension, so your IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. You can prevent the collection of your data by Google Analytics by downloading and installing the browser plugin available at the following link: Google Analytics Opt-out Browser Add-on. For more information on data processing by Google Analytics, please refer to Google's Privacy Policy.

Targeting and Audience Optimization Tools

To make our advertising and marketing efforts more effective, we use targeting and audience optimization tools on our website. These tools enable us to tailor advertisements and content more precisely to the interests of our users and personalize the user experience. They collect information about your interactions on our website, your search queries, and preferences. This data is used to show you more relevant advertisements and to understand which content and offers are most attractive to our users. We ensure that these tools are used in compliance with data protection laws and offer you the option to withdraw your consent at any time or adjust your preferences. Information on how to withdraw your consent or change your preferences can be found in our Privacy Policy and in the settings of your user account.