Privacy Policy

We take the protection of personal data seriously. We, therefore, process personal data in accordance with the requirements of the European General Data Protection Regulation (GDPR) and other statutory regulations. The following information in our Privacy Policy is intended to inform you in detail about how your personal data are handled and about your rights in this context.

1 Purposes of processing in accordance with Article 6 GDPR

Personal data such as, for example name, address, email address, are only collected by us as part of the provision of a service, for example as part of the configuration of the caniasERP environment on our website, when using the contact form or when registering for the newsletter. In this regard, we will use any information you voluntarily provide to us solely for the purpose for which you provided it. The processing of personal data is undertaken exclusively in accordance with the principles of Article 5 GDPR.

1.1 Processing of usage data when accessing our homepage (Article 6(1)(f) GDPR)

When you visit our web servers, each visit and the content you access is saved in a log file on our web servers for statistical and system-related purposes. The logs contain the following information:

• IP address, time stamp (date and time of access) of the requesting computer
• Accessed websites/file names
• Browser and operating system of the requesting computer
• Amount of data transferred and notification of successful access

For security reasons, for example safeguarding against attempted attacks on our web servers, this data is stored. The stored IP address will only be evaluated in the event of an attack on our systems (Article 6(1)(f) GDPR). The stored usage data will not be linked to a natural person. The logged data are stored for a period of 30 days. After this they are erased in the system.

1.2 Registration for the Newsletter (Article 6(1)(a) GDPR)

We offer you the opportunity of registering for our newsletter. When you register in relation to the newsletter, the details that you provide will be used exclusively for this purpose (Article 6 (1)(a) GDPR). We do not process any other data beyond this. To send the newsletter, we use the email address that you have provided on registration. To be sure that you are the actual owner of the specified email address, we use the so-called “Double opt-in system”. To do this, we log:

• your consent to receive newsletters
• the sending of the confirmation email
• the receipt of the reply email

At any time you can revoke the consent that you have granted for the processing of your personal data and use for the sending of the newsletter. To do this, you can either use the unsubscribe link in the newsletter or get in touch using the contact details provided in the Privacy Policy.

1.3 Use of the contact form (Article 6(1)(f) GDPR)

If you have any questions, for example in relation to our products, you can use the contact form provided on our website or contact us by email. If you use the contact form, we will process the details that you provide for the processing our enquiry and for asking any possible questions in response (Article 6(1)(f) GDPR).

1.4 Job applications (Section 26 (1) of the BDSG-Neu (new German Federal Data Protection Act)

We offer job applicants the opportunity of applying for our advertised job vacancies. You will find further information about the applicant data processing of Industrial Application Software GmbH – Deutschland here.

• Link to page on information to be provided

2 Integration of third-party services and contents

2.1 Cookies

We use cookies on our website. Cookies are small text files which are placed on your computer and which your browser stores. The purpose of using cookies is to make our service more user-friendly, effective and secure (Article 6(1)(f) GDPR). If you do not want cookies to be used, you can alter the configuration of your browser settings so that you can reject the storage of cookies or deactivate them using the Consent Manager. Equally, you can also obtain details about the cookies.

The consent management tool we use is Cookiebot. Cookiebot analyses our website and makes sure that you can decide which cookies or third-party services are allowed to be used on our websites, as long as these are not absolutely necessary for the proper functioning of the website. Cookiebot is operated by Cybot A/S and is integrated directly. To do this, your IP address is transmitted to Cybot.

Information about the purpose and storage of cookies can be found in the detailed descriptions of the Consent Manager.

• To the Consent Manager

2.2 Google Analytics

Subject to your consent (Article 6(1)(a) GDPR) this website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses "cookies", text files which are stored on your computer to help analyse your use of the website. The information generated by these cookies about your use of this website is transmitted to servers of Google Ireland Ltd. within member states of the European Union or in other states which are party to the Agreement on the European Economic Area. Your IP address is anonymised on the servers and then transferred to a Google server in the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. On behalf of the website operator, Google will use this information to analyse how you use the website, to generate reports about your website activities and to provide further services to the website operator associated with the use of the website and of the internet. The IP address transferred from your browser in the context of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by selecting the applicable setting on your browser; however, we wish to point out that this may result in the fact that you may not be able to fully utilise all functions of this website. In addition, you can refuse the transmission of data relating to your usage of the website (including your IP address) by the cookie to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link. The current link is http://tools.google.com/dlpage/gaoptout?hl=de.

In addition, you can deactivate the use of Google Analytics at any time again using the Consent Manager.

• To the Consent Manager

2.3 IPInfo.io

Subject to your consent (Article 6(1)(a) GDPR in conjunction with Article 49(1)(a) GDPR) this website uses the service ipinfo.io. We wish to inform you that this service is hosted in the USA and that your IP address will be transmitted to the USA. The USA is not deemed to be a safe third country. It cannot be ruled out, therefore, that your data could be used for other purposes without your knowledge and that it may not be possible for you to exercise your rights as a data subject. This usage cannot be ruled out, in particular, by law enforcement and secret service authorities.

We use the service IPInfo.io to learn more about you and, if necessary, to identify you or your company. This information is used to contact you or your company personally and to determine your interests in Canisa.

We also use the service for following up security incidents and in case our website is compromised.

You can deactivate the use of IPInfo.io at any time again using the Consent Manager.

• To the Consent Manager

2.4 LinkedIn Analytics and Marketing Solutions

Subject to your consent (Article 6(1)(a) GDPR), on our website we use a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter referred to as: "LinkedIn"). LinkedIn Analytics stores and processes information about your user behaviour on our website.
We use LinkedIn Analytics for marketing and optimisation purposes, in particular to analyse the use of our website and to continuously improve individual functions and offers as well as the user experience. The statistical analysis of user behaviour enables us to improve our content and make it more interesting for you as a user.

Marketing Solutions is used to show you personalised adverts about our products on LinkedIn. To do this, LinkedIn links the visit to our web content with your LinkedIn account, provided you are logged in. When you are logged in to LinkedIn, you can deactivate this data collection at any time at the following link: https://www.linkedin.com/psettings/enhanced-advertising.

LinkedIn uses, among other things, cookies, i.e. small text files which are stored locally in the memory of your browser on your terminal and which enable your use of our website to be analysed. Further information about the use of data by LinkedIn is available at https://www.linkedin.com/legal/privacy-policy.

You can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in your browser settings. However, we wish to point out that this may result in the fact that you may not be able to fully utilise all functions of our website. You can also prevent the collection of the aforementioned information by LinkedIn by setting an opt-out cookie at one of the websites linked below:

    https://www.linkedin.com/psettings/guest-controls

In addition, you can deactivate the use of LinkedIn Analytics at any time again using the Consent Manager.

• To the Consent Manager

2.4 YouTube

We use a YouTube plugin for the integration of videos, which is operated by Google Ireland Limited, with headquarters in Gordon House, Barrow Street, Dublin 4, Ireland. The videos are stored at http://www.YouTube.com and can be played directly from our website. These are all embedded in “enhanced privacy mode”, i.e. no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data referred to in the following paragraph be transmitted. We have no influence over this data transmission.

When you visit our website, YouTube receives the information that you have accessed the applicable subpage of our website. The data referred to in this Privacy Policy are also transmitted. This happens regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you need to log out before activating the button. YouTube stores your data in the form of usage profiles and uses them for the purposes of advertising, market research and/or ensuring that the website is designed to meet user requirements. Such analysis is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising  which is tailored to users interests and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

For more information on the purpose and scope of data collection and processing by YouTube, please see the privacy policy there. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy

2.6 Google Tag Manager

Subject to your consent (Article 6(1)(a) GDPR) this website uses Google Tag Manager. The Tag Manager is a code management system and supports the web developer and the design of the website by reloading recurring code snippets through Tag Manager. To do this, the code content, e.g. for the integration of Google Analytics or DoubleClick, is loaded directly by Google from your browser.

We wish to inform you that this service is hosted in the USA and that your IP address will be transmitted to the USA. The USA is not deemed to be a safe third country. It cannot be ruled out, therefore, that your data could be used for other purposes without your knowledge and that it may not be possible for you to exercise your rights as a data subject. This usage cannot be ruled out, in particular, by law enforcement and secret service authorities.

You can deactivate the Google Tag Manager at any time again using the Consent Manager.

• To the Consent Manager

3 Other information to be provided in accordance with Article 13 GDPR

3.1 Identity and contact details of the controller (Article 13(1)(a) GDPR)

IAS BİLGİ İŞLEM DANIŞMANLIK SANAYİ VE TİCARET ANONİM ŞİRKETİ

Phone: +90 212 4656560
Email: iba@canias40.com
Address: Havaalanı Kavşağı EGS Business Park Blokları B1 Blok K:17 34149 Yeşilköy - Bakırköy / Istanbul

3.2 Identity and contact details of the Data Protection Officer, Article 13(1)(b) GDPR)

Gökçesu Fırat, gfirat@canias40.com

3.3 Recipients or categories of recipients of the personal data (Article 13(1)(e) GDPR)

• Hosting provider
• Affiliated companies

3.4 Storage period in accordance with statutory retention obligations (Article 13(2)(a) GDPR)

We store personal data in accordance with the principles of data avoidance and data economy only for as long as necessary or required by law (statutory storage period). As a rule, personal data is erased within ten years of the termination of the contract or earlier if a prospective customer does not become a customer. After the respective purpose ceases to apply, the corresponding personal data will be erased in accordance with statutory regulations.

3.5 Rights of access, rectification, erasure, restriction, data portability and objection (Article 13(2)(b) GDPR

As the data subject, you have the right at any time

• to request access to your personal data stored by us and to information about the processing of that data
• to rectify incorrect personal data
• to request the erasure of your data stored by us
• to demand the restriction of data processing if we are not yet permitted to erase your data due to legal obligations
• to lodge an objection to the processing of your data by us
• to control data portability, provided you have consented to the data processing or have concluded a contract with us
• to withdraw your consent with effect for the future at any time.

Please contact the controller using the contact details provided.

3.6 Security

In order to protect your data against accidental or intentional manipulation, loss, destruction, and against unauthorized access by third parties, we apply appropriate technical and organizational security measures. These security measures are continuously improved in line with technological developments.

3.7 Right to lodge a complaint (Article 13(2)(d) GDPR)

As the data subject you have the right at any time to contact the competent supervisory authority. The competent supervisory authority for us is:

Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (Baden-Württemberg Commissioner for Data Protection and Freedom of Information)

Postfach 102932

70025 Stuttgart Deutschland

Tel.: +49 (0) 711/615541-0

Email: poststelle@lfdi.bwl.de

3.8 Changes to our Privacy Policy

To ensure that our Privacy Policy always complies with current legal requirements, we reserve the right to amend it at any time. This also applies where the Privacy Policy needs to be amended to account for new or revised services. The new Privacy Policy will then apply with effect from the next time you visit our website.

Last updated: 23/10/2020

Information in accordance with Article 13 of the General Data Protection Regulation (GDPR)

Facebook Fan Page visitors

Jointly responsible

We, together with Facebook Ireland Limited (“Facebook Ireland”), are the joint controllers responsible for the processing of Insights data. The details of the responsibilities can be viewed at https://de-de.facebook.com/legal/terms/page_controller_addendum.

Facebook Ireland agrees to take primary responsibility for the processing of Insights data in accordance with the GDPR and to fulfill all obligations in accordance with the GDPR with regard to the processing of Insights data (e.g. Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). In addition, Facebook Ireland will make the essentials of this Page Insights Addendum available to the data subjects.

Identity and contact details of the responsible party

IAS BİLGİ İŞLEM DANIŞMANLIK SANAYİ VE TİCARET ANONİM ŞİRKETİ

Phone: +90 212 4656560
Email: iba@canias40.com
Address: Havaalanı Kavşağı EGS Business Park Blokları B1 Blok K:17 34149 Yeşilköy - Bakırköy / Istanbul

Identity and contact details of the data protection officer

Gökçesu Fırat, gfirat@canias40.com

Purposes of the data processing and legal basis for the data processing within the meaning of Article 13(1)(c) GDPR

Operating a Facebook fan page for purposes of...

• Publicity within the meaning of Article 6(1)(f) GDPR
• Public image-building within the meaning of Article 6(1)(f) GDPR
• Contacting the responsible party within the meaning of Article 6(1)(f) GDPR
• Responding to contact enquiries within the meaning of Article 6(1)(f) GDPR
• Statistical analysis of user behaviour for optimization and marketing purposes within the meaning of Article 6(1)(f) GDPR
• Employer branding within the meaning of Article 6(1)(f) GDPR

Controller's interests if interests must be weighed within the meaning of Article 13(1)(d) GDPR

Enforcement of legal claims and defence in legal disputes

• Ensuring the company’s IT security and IT operation
• Prevention of criminal offences
• Measures for business management and further development of services and products

Recipients or categories of recipients of personal data within the meaning of Article 13(1)(e) GDPR

Facebook

Transfer to third countries within the meaning of Article 13(1)(f) GDPR

Data is transferred to third countries; for Facebook, the USA.

Storage period in accordance with statutory retention obligations within the meaning of Article 13(2)(e) GDPR

The party responsible has only a limited influence on the deletion of personal data, as this is largely determined by Facebook. For more information, please see https://www.facebook.com/privacy/explanation.

Rights of access, rectification, erasure, restriction, data portability and objection within the meaning of Article 13(2)(b) GDPR, Article 15 ff. GDPR

As the data subject you have the right of access to your personal data, the rectification and erasure of your personal data, the restriction of the processing of your personal data and a right to data portability, at all times. Please contact the controller using the contact details provided.

Right to object within the meaning of Article 21 (1) GDPR

Insofar as your data is processed to ensure the protection of legitimate interests, you have the right to object at any time to the processing by contacting us using the contact data provided if your particular situation gives rise to reasons that would prevent such data processing. We will then discontinue such processing unless it serves overriding legitimate interests on our part.

Right to withdraw within the meaning of Article 13 (2)(c) GDPR

Where the use of your personal data is based on your consent, you can withdraw such consent with effect for the future at any time. This shall not affect the lawfulness of processing based on consent before its withdrawal. Please contact the responsible party in this connection, in accordance with the contact details provided.

Right to lodge a complaint within the meaning of Article 13(2)(d) GDPR

As the data subject you have the right at any time to contact the applicable data protection commissioner, namely the Baden-Württemberg Commissioner for Data Protection and Freedom of Information (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg) if you have a complaint.

Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (Baden-Württemberg Commissioner for Data Protection and Freedom of Information)

Office and parcel address

Lautenschlagerstraße 20

70173 Stuttgart

Postal address

Postfach 10 29 32

70025 Stuttgart

Telephone: 0711/61 55 41 – 0

Fax: 0711/61 55 41 – 15

Email: poststelle@lfdi.bwl.de

Existence of a requirement for the provision of personal data within the meaning of Article 13(2)(e) GDPR

You provide us or Facebook with the collected data voluntarily. If you do not want your data to be processed, you should not use our Facebook Fan Page.

For information about the purpose and scope of data collection, processing and the use of this data by Facebook, as well as all your relevant rights and the settings available for the protection of your privacy, please see the privacy policies of Facebook at (https://www.facebook.com/about/privacy/).