Privacy Policy of iasbusinessacademy

Last updated: February 2023

We take the protection of personal data seriously. We, therefore, process personal data in accordance with the requirements of the European General Data Protection Regulation (GDPR) and other statutory regulations. The following information in our Privacy Policy is intended to inform you in detail about how your personal data are handled and about your rights in this context.

1. Identity and contact details of the responsible party

IAS BİLGİ İŞLEM DANIŞMANLIK SANAYİ VE TİCARET ANONİM ŞİRKETİ

Address: Havaalanı Kavşağı EGS Business Park Blokları B1 Blok K:17 34149 Yeşilköy - Bakırköy / Istanbul

Phone: +90 212 4656560

Email: sales_tr@canias40.com

2. Identity and contact details of the data protection officer

E-Mail: datasecurity@canias40.com

3. Purposes of processing in accordance with Article 6 GDPR

Personal data such as, for example name, address, email address, are only collected by us as part of the provision of a service, for example as part of the configuration of the caniasERP environment on our website, when using the contact form or when registering for the newsletter. In this regard, we will use any information you voluntarily provide to us solely for the purpose for which you provided it. The processing of personal data is undertaken exclusively in accordance with the principles of Article 5 GDPR.

3.1 Processing of usage data when accessing our homepage

When you visit our web servers, each visit and the content you access is saved in a log file on our web servers for statistical and system-related purposes. The logs contain the following information:

• IP address, time stamp (date and time of access) of the requesting computer
• Accessed websites/file names
• Browser and operating system of the requesting computer
• Amount of data transferred and notification of successful access

For security reasons, for example safeguarding against attempted attacks on our web servers, this data is stored. The stored IP address will only be evaluated in the event of an attack on our systems (Article 6 (1) (f) GDPR). The stored usage data will not be linked to a natural person. The logged data are stored for a period of 30 days. After this they are erased in the system.

3.2 Error Logs

For the purpose of error identification and correction, so-called error logs are created. This is absolutely necessary in order to be able to react to possible problems in the presentation and implementation of content as promptly as possible (legitimate interest). These data are usually pseudonyms and therefore do not allow any conclusions to be drawn about a natural person. The legal basis for this is found in § 15 (1) TMG as well as Art. 6. (1) (f) GDPR. When an error message occurs, general data such as the domain name of the website, the web browser and web browser version, the operating system, the IP address and the timestamp when the corresponding error message/specification occurred are recorded. The storage period of these error logs is up to 60 days. There is no right of objection.

3.3 Newsletter registration

We offer you the opportunity to register for our newsletter. When registering to receive our newsletter, the information you provide will be used exclusively for this purpose (Art. 6 (1) (a) GDPR). We do not process any further data beyond this. For sending the newsletter, we use the e-mail address you provided when registering. To ensure that you are the actual owner of the e-mail address you provided, we use the "double opt-in procedure". For this purpose, we log:

• the consent to receive newsletters
• the sending of the confirmation e-mail
• the receipt of the reply e-mail

You can revoke your consent to the processing of your personal data and its use for sending newsletters at any time with effect for the future. To do this, you can either use the unsubscribe link located in the newsletter or contact the contact specified in the privacy policy. The revocation of your consent by unsubscribing from the e-mails with information from IAS Group has no effect on the lawfulness of the data processing until the time of revocation. If you unsubscribe from the e-mails, the data stored by us for the purpose of sending these e-mails will be deleted, unless the deletion contradicts legal retention obligations.

3.4 Use of the contact form

If you have any questions, for example about our products, you can use the contact form provided on our website or contact us by e-mail. When using the contact form, we process the information you provide to process your request and any queries (Art. 6 (1) (f) GDPR).

3.5 Application

We offer applicants the opportunity to apply for our advertised positions. You can find more information about the applicant data processing of Industrial Application Software GmbH - Germany here: Link to mandatory information page.

4. Cookies

We use so-called "cookies". Cookies are small text files that are stored by an Internet user's browser on his or her hard drive when he or she visits a website. Most cookies are so-called "session cookies". These are necessary so that you can use certain functions of our website. The cookies are automatically deleted from your hard drive after your browser session ends. The temporary storage is based on Art. 6 (1) (b) GDPR.

We also use "persistent cookies", i.e. cookies that are stored on your hard drive for a longer period of time, on our website and only set them with your consent. These cookies are used to illustrate which pages have been visited, how many users have visited our website and, to be able to analyze user behavior on our website.

When you use our website, you can agree to the use and storage of cookies on your hard drive or refuse this. Most browsers accept cookies automatically. You can also specify in your browser settings whether the cookies are allowed or not. To delete cookies, please also refer to the help function of your browser. To understand the browser settings, the following links may be helpful, otherwise you should use the 'Help' option in your browser to get more information.

• Cookie settings in Edge
• Cookie settings in Firefox
• Cookie settings in Chrome
• Cookie settings in Safari

You can also view our web pages without cookies. However, we would like to point out that this may lead to functional restrictions of our website. Please refer to the "Cookie settings" on our website for the setting options regarding cookies.

We use cookies to personalize content and ads, to offer social media features, and to analyze traffic to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data that you have provided to them or that they have collected as part of your use of the Services.

This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages.

• Essential cookies are necessary to ensure the core functionality of the site.
• Statistical cookies are cookies that are used to track user behavior on our site so that the functionality of the site can be improved.
• Marketing cookies are cookies that we use to serve interest-based advertising.

The legal basis for the use of essential cookies is Art. 6 (1) (f) GDPR - a legitimate interest. Our legitimate interest in the use of essential cookies is to be able to provide a functioning website. The legal basis for the other cookies is Art. 6 (1) (a) GDPR - your consent. No non-essential cookies will be set without your consent.

You can change or revoke your consent to cookie use at any time from the cookie declaration on our website with effect for the future: To the Consent Manager

5. Integration of third-party services and contents

5.1 Google tools for analysis, advertising and others

Unless otherwise stated in this privacy policy, the operator of all Google services mentioned under 5.1 is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The legal basis for the processing is your consent pursuant to Art. 6 (1) (a) GDPR. You can refuse your consent or revoke it at any time via our To the Consent Manager with effect for the future if you do not want Google to collect and process the aforementioned data for the respective purposes.

Your personal data will only be stored for the period of time for which they are required to fulfill the respective processing purpose. Your data will be deleted as soon as it is no longer required to achieve the purpose.

In addition to Google Ireland Limited, your data may also be transferred to the following recipients for processing:

• Google LLC.
• Alphabet Inc.

If personal data is processed by Google, this data may also be transferred to the USA. We ensure the transfer of your data through so-called standard contractual clauses. These guarantee your data a contractual level of security during processing that corresponds to that of the GDPR.

You can find more information about Google's privacy policy here: https://www.google.com/intl/de/policies/privacy/.

5.1.1 Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google LLC ("Google"). Google Analytics uses cookies that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

With the help of Google Analytics, the following data is collected and processed:

• IP address (anonymized)
• Usage data
• Click path
• App updates
• Browser information
• Device information
• JavaScript support
• Visited pages
• Referrer URL
• Downloads
• Flash version
• Location information
• Purchase activity
• Widget interactions
• Date and time of visit

We would like to point out that this website uses the "_anonymizeIp()" extension from Google Analytics. This activates IP anonymization on our website and your IP address will be truncated by Google, within member states of the European Union or other states party to the Agreement on the European Economic Area, before being transmitted to the United States. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The shortening excludes the possibility of direct personal reference.

Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By clicking on the "I agree" button in the cookie window that appears the first time you visit our website or by making the appropriate settings in our cookie settings, you consent to the processing of data about you by Google in the manner and for the purposes set out above. You can revoke your consent at any time with effect for the future, i.e. without the lawfulness of the data processing ceasing to apply until the time of your revocation, by using one of the following methods:

• By changing the cookie settings on our website: Consent Manager.
• By downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
• By clicking on the following link: Disable Google Analytics.

An opt-out cookie will be set to prevent future collection of your data when visiting this website.

For more information on Google's terms of use and privacy policy, please visit http://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/

Google Analytics also allows us to use a JavaScript to track so-called events on our website, i.e. the click on certain buttons, the download of information, etc.. You cannot object to this separately, but only by completely switching off the tracking as described above.

In addition, you can deactivate the use of Google Analytics at any time via the Consent Manager: Consent Manager.

5.1.2 Google Tag Manager

Google Tag Manager is a solution provided by Google LLC ("Google") that allows us to manage website tags through one interface. Tags are small elements of code on our website that are used to, among other things, measure traffic and visitor behavior, track the impact of online advertising and social channels, deploy remarketing and audience targeting, and test and optimize our website. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool provides for the triggering of other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it will remain in place for all tracking tags implemented with Google Tag Manager. http://www.google.de/tagmanager/use-policy.html

You can deactivate Google Tag Manager again at any time via Consent Manager.

5.1.3 YouTube

We use a YouTube plugin for the integration of videos, which is operated by Google Ireland Limited, with its registered office in Gordon House, Barrow Street, Dublin 4, Ireland. The videos are stored on http://www.YouTube.com and can be played directly from our website. These are all embedded in "enhanced privacy mode", which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in the next paragraph be transferred. We have no influence on this data transmission.

• IP address
• Referrer URL
• Device information
• Viewed videos

By visiting our website and your consent to the use of YouTube, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in this privacy policy is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. For more information on the purpose and scope of data collection and processing by YouTube, please see the privacy policy there. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy

The legal basis for the processing is your consent pursuant to Art. 6 (1) (a) GDPR. You can refuse your consent or revoke it at any time with effect for the future if you do not want Google to collect and process the aforementioned data for the respective purposes.

Your personal data will only be stored for the period of time for which they are required to fulfill the respective processing purpose. Your data will be deleted as soon as it is no longer required to achieve the purpose.

In addition to Google Ireland Limited, your data may also be transferred to the following recipients for processing:

• Google LLC.
• Alphabet Inc.

If personal data is processed by Google, this data may also be transferred to the USA. We ensure the transfer of your data through so-called standard contractual clauses. These guarantee your data a contractual security level during processing that corresponds to that of the DS-GVO.

You can deactivate YouTube at any time via the Consent Manager.

5.1.4 DoubleClick

This website uses the online marketing tool DoubleClick of Google LLC with your consent (Art. 6 (1) (a) GDPR). DoubleClick uses cookies to display ads that are relevant to users, to create reports on marketing campaigns or to prevent a user from seeing the same ads more than once. In addition, DoubleClick can use cookies to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later visits the advertiser's website with the same browser and makes a purchase there.

We would like to point out that the service is hosted in the USA and that your IP address is transmitted to the USA. The USA is not a secure third country. It can therefore not be ruled out that your data will be used for other purposes without your knowledge and that it will not be possible for you to exercise your data subject rights. In particular, this cannot be ruled out by law enforcement and intelligence agencies.

You can deactivate DoubleClick at any time via the Consent Manager.

5.1.5 Google invisible reCAPTCHA

In order to ensure appropriate data security when using contact forms, we use the reCAPTCHA service of the company Google LLC ("Google") in certain cases. This is primarily used to distinguish whether the input is made by a natural person or abusively by machine and automated processing. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on the following characteristics:

• IP address
• Referrer URL
• Information about the operating system
• Cookies, if applicable
• Mouse movements and keyboard strokes
• dwell time
• User device settings

This analysis starts automatically as soon as you have given your consent. The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place.

The service includes the transmission of the characteristics to Google. For more information about Google reCAPTCHA, please visit: https://www.google.com/recaptcha/intro/android.html

5.1.6 Google Ads

The "Google Ads" service is used on this website. The operator of this service is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The service has the purpose of so-called "conversion tracking", i.e. we can see what happened after you clicked on one of our ads. Cookies are set for this purpose, which have a limited validity.

With the help of Google Ads, the following data is collected and processed:

• Cookie ID
• Visited pages
• IP address
• Duration of the website visit
• Usage data of the website
• Content the user is interested in
• Clicked advertising
• Web requests
• Cookie information
• Referrer URL
• Browser language
• Browser type

The legal basis for the processing is your consent pursuant to Art. 6 (1) a) DS-GVO. If you do not want Google Ads to collect and process the aforementioned data, you can refuse your consent or revoke it at any time with effect for the future.

You can change your cookie settings at any time in our cookie management system: Consent Manager.

6. Storage period in accordance with statutory retention obligations

We store personal data in accordance with the principles of data avoidance and data economy only for as long as necessary or required by law (statutory storage period). As a rule, personal data is erased within ten years of the termination of the contract or earlier if a prospective customer does not become a customer. After the respective purpose ceases to apply, the corresponding personal data will be erased in accordance with statutory regulations.

7. Security of your Data

To protect your personal data against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons, we use appropriate technical and organizational security measures. These security measures are continuously improved in line with technological developments.

8. Your rights

We will fulfill your rights below to the extent that the legal requirements for asserting the rights are met.

8.1 Right of objection

Insofar as the processing of your data is carried out to protect legitimate interests, you have the right to object to this processing at any time using our contact details provided, if reasons arise from your particular situation that conflict with this data processing. This also applies to profiling based on legitimate interests. We will then stop this processing unless there are compelling legitimate grounds on our part that override your interests, rights and freedoms, or it serves to assert, exercise or defend legal claims.

8.2 Right of objection

Insofar as the processing of your data is carried out for the purpose of direct marketing, you have the right to object to this processing at any time by contacting us; this also applies to profiling, insofar as it is related to such direct marketing.

8.3 Right of withdrawal

If you have consented to the processing of your data, you have the right to revoke this consent at any time for the future. The lawfulness of the processing until the revocation is not affected by this. To do so, please contact the responsible office using the contact details provided above.

8.4 Right to information, correction, deletion, restriction of processing, data portability

Pursuant to Art. 15 GDPR, you have the right to request information free of charge about the personal data that has been stored about you. In accordance with Art. 16, 17 and 18 of the GDPR, you also have the right to correct inaccurate data and to restrict the processing and deletion of your personal data.

You are also entitled, under the conditions set out in Art. 20 GDPR, to receive the personal data relating to you that has been stored in a structured, common and machine-readable format and to transfer this data to another controller without hindrance from us.

To do so, please contact the controller at the contact details provided above.

8.5 Right to lodge a complaint

As the data subject you have the right at any time to contact the competent supervisory authority. The competent supervisory authority for us is:

Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (Baden-Württemberg Commissioner for Data Protection and Freedom of Information)

P.O. Box 102932

70025 Stuttgart Germany

Tel.: +49 (0) 711/615541-0

Email: poststelle@lfdi.bwl.de

9. Modification of the privacy policy

In order to ensure that our privacy policy always complies with the current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the data protection declaration has to be adapted due to new or revised services, for example new services. The new data protection statement will then apply the next time you visit our website.

10. Information in accordance with Art. 13 GDPR for Facebook Fan Page visitors

We, together with Facebook Ireland Limited (“Facebook Ireland”), are the joint controllers responsible for the processing of Insights data. The details of the responsibilities can be viewed at https://de-de.facebook.com/legal/terms/page_controller_addendum.

Facebook Ireland agrees to take primary responsibility for the processing of Insights data in accordance with the GDPR and to fulfill all obligations in accordance with the GDPR with regard to the processing of Insights data (e.g. Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). In addition, Facebook Ireland will make the essentials of this Page Insights Addendum available to the data subjects.

Identity and contact details of the responsible party other than Facebook

IAS BİLGİ İŞLEM DANIŞMANLIK SANAYİ VE TİCARET ANONİM ŞİRKETİ

Phone: +90 212 4656560

Email: sales_tr@canias40.com

Address: Havaalanı Kavşağı EGS Business Park Blokları B1 Blok K:17 34149 Yeşilköy - Bakırköy / Istanbul

Identity and contact details of the data protection officer

E-Mail: datasecurity@canias40.com

Purposes of the data processing and legal basis for the data processing within the meaning of Article 13(1)(c) GDPR

Operating a Facebook fan page for purposes of:

• Publicity within the meaning of Article 6(1) (f) GDPR
• Public image-building within the meaning of Article 6(1) (f) GDPR
• Contacting the responsible party within the meaning of Article 6(1) (f) GDPR
• Responding to contact enquiries within the meaning of Article 6(1) (f) GDPR
• Statistical analysis of user behaviour for optimization and marketing purposes within the meaning of Article 6(1) (f) GDPR
• Employer branding within the meaning of Article 6(1) (f) GDPR

Controller's interests if interests must be weighed within the meaning of Article 13 (1) (d) GDPR

Enforcement of legal claims and defence in legal disputes

• Ensuring the company’s IT security and IT operation
• Prevention of criminal offences
• Measures for business management and further development of services and products

Recipients or categories of recipients of personal data within the meaning of Article 13 (1) (e) GDPR

Facebook

Transfer to third countries within the meaning of Article 13 (1) (f) GDPR

Data is transferred to third countries; for Facebook, the USA.

Storage period in accordance with statutory retention obligations within the meaning of Article 13 (2) (e) GDPR

The party responsible has only a limited influence on the deletion of personal data, as this is largely determined by Facebook. For more information, please see https://www.facebook.com/privacy/explanation.

Rights of access, rectification, erasure, restriction, data portability and objection within the meaning of Article 13 (2) (b) GDPR, Article 15 ff. GDPR

As the data subject you have the right of access to your personal data, the rectification and erasure of your personal data, the restriction of the processing of your personal data and a right to data portability, at all times. Please contact the controller using the contact details provided.

Right to object within the meaning of Article 21 (1) GDPR

Insofar as your data is processed to ensure the protection of legitimate interests, you have the right to object at any time to the processing by contacting us using the contact data provided if your particular situation gives rise to reasons that would prevent such data processing. We will then discontinue such processing unless it serves overriding legitimate interests on our part.

Right to withdraw within the meaning of Article 13 (2) (c) GDPR

Where the use of your personal data is based on your consent, you can withdraw such consent with effect for the future at any time. This shall not affect the lawfulness of processing based on consent before its withdrawal. Please contact the responsible party in this connection, in accordance with the contact details provided.

Right to lodge a complaint within the meaning of Article 13 (2) (d) GDPR

As the data subject you have the right at any time to contact the applicable data protection commissioner, namely the Baden-Württemberg Commissioner for Data Protection and Freedom of Information (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg) if you have a complaint.

Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (Baden-Württemberg Commissioner for Data Protection and Freedom of Information)

P.O. Box 102932

70025 Stuttgart Germany

Tel.: +49 (0) 711/615541-0

E-Mail: poststelle@lfdi.bwl.de

Existence of a requirement for the provision of personal data within the meaning of Article 13 (2) (e) GDPR

You provide us or Facebook with the collected data voluntarily. If you do not want your data to be processed, you should not use our Facebook Fan Page.

For information about the purpose and scope of data collection, processing and the use of this data by Facebook, as well as all your relevant rights and the settings available for the protection of your privacy, please see the privacy policies of Facebook at (https://www.facebook.com/about/privacy/).