Privacy Policy

Privacy at a Glance

Your data is in good hands with us. Helping you stay informed, this Privacy Notice explains how we handle your personal data and your rights under the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The controller responsible for data processing is isento robotics GmbH (hereinafter referred to as “we”, “us”, “our” or “isento”).

This Privacy Notice consists of two parts:

• In Part A, you will find general information regarding data protection at isento, your legal rights, and our Data Protection Officer’s contact details.
• Part B addresses specific categories of individuals and explains in detail which personal data we collect and how we process it. This applies to you in your role as:
  • a. Visitors to our websites,
  • b. Customers who use our services or purchase our products,
  • c. Contact persons at B2B customers whose employees use our services,
  • d. Job applicants seeking employment with our company,
  • e. Newsletter subscribers whom we keep informed on a regular basis, and
  • f. Visitors to our social media pages.

A. General Information

1. Our Contact Details

If you have any questions, suggestions, or requests regarding this Privacy Notice or if you wish to exercise your rights as a data subject, please contact us at:

isento robotics GmbH
it-systems & services
Ostendstraße 242
DE-90482 Nuremberg, Germany
Phone: +49 911 21 77 38 70
Email: info@isento.de
Web: www.isento-robotics.de

Authorized representative managing directors:
Dr. Shota Okujava, Dr. Jürgen Baier

How can you contact our Data Protection Officer?

You may contact our company Data Protection Officer using the following details:

Jörg ter Beek
Cortina Consult GmbH
Hafenweg 24, 48155 Münster, Germany
Web: www.cortina-consult.com
Email: datenschutzbeauftragter@isento.de

2. On What Legal Basis Do We Process Your Data?

The term “personal data” refers to any information relating to an identified or identifiable natural person. We process personal data in accordance with the applicable data protection laws, in particular the GDPR and the BDSG. We process personal data only where a valid legal basis exists:

• on the basis of your consent (Art. 6(1)(a) GDPR),
• where necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR),
• where necessary for compliance with a legal obligation (Art. 6(1)(c) GDPR),
• or where necessary for the purposes of our legitimate interests or those of a third party, provided that such interests are not overridden by your interests, fundamental rights or freedoms requiring the protection of personal data (Art. 6(1)(f) GDPR).

If you apply for a position within our company, we also process your personal data for the purpose of deciding whether to establish an employment relationship in accordance with Section 26(1) sentence 1 BDSG.

3. Your Rights

You remain in control of your personal data! As a data subject, you have the right to exercise the following rights under applicable data protection laws:

• Right of access (Art. 15 GDPR, Section 34 BDSG): Pursuant to Art. 15 GDPR and Section 34 BDSG, you have the right to obtain confirmation as to whether we process personal data concerning you and, where that is the case, access to such data.
• Right to rectification (Art. 16 GDPR): Pursuant to Art. 16 GDPR, you have the right to request the rectification of inaccurate personal data concerning you.
• Right to erasure (Art. 17 GDPR, Section 35 BDSG): Pursuant to Art. 17 GDPR and Section 35 BDSG, you have the right to request the deletion of your personal data.
• Right to restriction of processing (Art. 18 GDPR): Pursuant to Art. 18 GDPR, you have the right to request restriction of the processing of your personal data.
• Right to data portability (Art. 20 GDPR): Pursuant to Art. 20 GDPR, you have the right to receive personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller.
• Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on your consent, you may withdraw that consent at any time pursuant to Art. 7(3) GDPR. Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes applicable data protection laws.
• Right to object (Art. 21 GDPR): Pursuant to Art. 21(1) GDPR, you have the right to object, on grounds relating to your particular situation, to the processing of your personal data where such processing is based on Art. 6(1)(e) or Art. 6(1)(f) GDPR. Where we process your personal data for direct marketing purposes, you have the right to object to such processing at any time pursuant to Art. 21(2) and (3) GDPR.

Where you exercise your rights under Arts. 15 to 22 GDPR, we process the personal data you provide for the purpose of fulfilling your request and documenting compliance with our legal obligations. Data stored for the preparation and provision of information requests will be processed solely for that purpose and for data protection compliance purposes. Processing will otherwise be restricted in accordance with Art. 18 GDPR. This processing is based on Art. 6(1)(c) GDPR in conjunction with Arts. 15 to 22 GDPR and Section 34(2) BDSG.

4. Where Do We Process Your Data?

As a general principle, we process your data on servers located within the European Union and protected by state-of-the-art security measures. To provide our services, we engage external service providers who may receive personal data on our behalf. Certain processing activities may involve the transfer of personal data to countries outside the scope of the GDPR (“third countries”). Such transfers take place only where legally permitted:

• Where the European Commission has determined that a third country ensures an adequate level of data protection through an adequacy decision (Art. 45 GDPR). This applies to all transfers to countries listed here:
  International dimension of data protection
• If no adequacy decision exists, personal data will only be transferred where appropriate safeguards under Art. 46 GDPR are in place (in particular the EU Standard Contractual Clauses – SCCs) or where one of the derogations under Art. 49 GDPR applies. You have the right to obtain a copy of these clauses upon request.
• Where you expressly consent to the transfer of personal data to a third country, such transfer is carried out on the basis of Art. 49(1)(a) GDPR.

5. To Whom and Why Do We Disclose Your Personal Data?

In order to provide our services and operate our business efficiently, we engage various external service providers and, where necessary, disclose personal data to them. Where additional categories of recipients apply to specific groups of data subjects, these are described in Part B:

• Hosting providers: We do not operate our own servers. Instead, we engage certified hosting providers to host our administrative systems and CRM platform.
• IT service providers and SaaS vendors: We use various service providers acting as processors to support the provision, operation and maintenance of our services.
• Affiliated companies: isento robotics GmbH and affiliated companies of the isento group (such as isento GmbH and isento eCommerce solutions GmbH) work with cross-company teams. As a result, personal data may be shared with affiliated companies where necessary.
• Public authorities: To comply with legal obligations, court orders or other lawful requests from governmental authorities.
• Other service providers: Where necessary, personal data may be disclosed to postal and delivery service providers, banking institutions, tax advisors, auditors, financial authorities and document destruction service providers.

6. How Long Do We Store Your Data?

Unless otherwise specified in this Privacy Notice, we retain personal data only for as long as necessary to fulfil the relevant processing purpose or to comply with contractual or statutory obligations. Statutory retention obligations may arise in particular under commercial and tax legislation. From the end of the calendar year in which the data were collected, we generally retain personal data contained in accounting records for ten (10) years and personal data contained in commercial correspondence and contracts for six (6) years. Furthermore, we may retain data relating to documented consents, complaints, warranty claims, legal claims and defences for the duration of the applicable statutory limitation periods. Personal data processed for marketing purposes will be deleted if you object to processing for such purposes.

7. How Do We Use Cookies and Other Tracking Technologies?

We use cookies and similar technologies on our websites and in connection with the provision of our services. Further information about our use of these technologies is available through our Cookie Banner, also referred to as a Consent Management Platform (CMP). The Cookie Banner can be accessed when you first visit our website, via a link in the website footer or via a consent badge displayed on the edge of the website. The Cookie Banner also allows you to manage your preferences and to accept or reject specific categories of cookies and similar technologies.

B. Specific Information – How and Why We Process Your Data

1. Website Visitors

2. Customers

3. Contact Persons at B2B Customers

4. Job Applicants

5. Newsletter Subscribers

6. Social Media Visitors